CVE-2026-108186
CriticalCVSS 9.6Summary
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Risk Assessment
An unauthenticated user may elevate privileges, potentially leading to unauthorized access to data or application functions.
Recommendation
Update Zoom Workplace for Windows to the latest patched version.
Other vulnerabilities in Zoom Workplace
See all- CVE-2026-108187High
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2026-53408High
In Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS, improper authorization in the handler for custom URL scheme may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-62484High
Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to conduct an escalation of privilege via network access.
- CVE-2025-64738Medium
External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to disclose information via local access.
- CVE-2025-62482Medium
Cross-site scripting in Zoom Workplace for Windows before version 6.5.10 may allow an unauthenticated user to impact integrity via network access.
Original NVD description (English source)
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS