Early warning
Zoom patches critical Windows privilege escalation flaw CVE-2026-108186
Zoom has released updates for two flaws in Zoom Workplace for Windows, including CVE-2026-108186 (CVSS 9.6), an improper input validation bug. The item says it could let an unauthenticated user escalate privileges, and the source is The Hacker News.
Written by a model from the sources below. Verify against them.
- Kind
- Pending CVE
- Vendor
- Zoom
- Product
- Zoom Workplace for Windows
- Status
- Confirmed
- First seen
- Confirmed
What to do
Update Zoom Workplace for Windows to the version Zoom released with this fix.
Confirm the installed version in the Zoom client before and after updating.
Review Windows systems running Zoom for signs of unexpected privilege changes.
Timeline
- Made public by The Hacker News
- First seen by cve.now
- Confirmed as CVE-2026-108186
Evidence 1
- PressThe Hacker News
“Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems.”
Corrections
None so far.
Something wrong on this page? Report an error. Every fix is listed here.
Questions about SZB-95bc7c63c8
Has Zoom confirmed it?
Yes. Confirmed as CVE-2026-108186.Source: The Hacker News
What should Zoom users do?
Update Zoom Workplace for Windows to the version Zoom released with this fix. Confirm the installed version in the Zoom client before and after updating. Review Windows systems running Zoom for signs of unexpected privilege changes.
Does it have a CVE?
Yes. It is tracked as CVE-2026-108186.Source: CVE-2026-108186