CVE-2026-108187
HighCVSS 8.1Summary
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Risk Assessment
An unauthenticated attacker could potentially gain elevated privileges on the system, leading to compromise of the application or user data.
Recommendation
Update Zoom Workplace for Windows to the latest patched version. Restrict unnecessary network access to the Zoom application.
Other vulnerabilities in Zoom Workplace
See all- CVE-2026-108186Critical
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2026-53408High
In Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS, improper authorization in the handler for custom URL scheme may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62484High
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-64738Medium
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to disclose information via local access.
- CVE-2025-62482Medium
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Original NVD description (English source)
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS