# SZB-95bc7c63c8: Zoom patches critical Windows privilege escalation flaw CVE-2026-108186

Zoom has released updates for two flaws in Zoom Workplace for Windows, including CVE-2026-108186 (CVSS 9.6), an improper input validation bug. The item says it could let an unauthenticated user escalate privileges, and the source is The Hacker News.

- Type: Early warning
- Kind: Pending CVE
- Vendor: Zoom
- Product: Zoom Workplace for Windows
- Status: Confirmed
- Sources: 1 distinct
- First seen: 2026-11-11 17:06 UTC
- Confirmed: 2026-11-11 17:06 UTC

Written by a model from the sources below. Verify against them.

## What to do

- Update Zoom Workplace for Windows to the version Zoom released with this fix.
- Confirm the installed version in the Zoom client before and after updating.
- Review Windows systems running Zoom for signs of unexpected privilege changes.

## Timeline

- 2026-11-11 16:12 UTC: Made public by The Hacker News
- 2026-11-11 17:06 UTC: First seen by cve.now
- 2026-11-11 17:06 UTC: Confirmed as CVE-2026-108186

## Evidence (1 source)

- 2026-11-11 · Press · [The Hacker News](https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html): “Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege escalation on affected systems.”

## Corrections

None so far.

Something wrong on this page? Report an error: https://github.com/sazabi/cve.now/issues/new?title=Wrong%20fact%20on%20SZB-95bc7c63c8&body=https%3A%2F%2Fcve.now%2FSZB-95bc7c63c8%0A%0AWhat%20is%20wrong%2C%20and%20the%20source%20that%20shows%20it%3A%0A

## Questions about SZB-95bc7c63c8

### Has Zoom confirmed it?

Yes. Confirmed as CVE-2026-108186.

Source: https://thehackernews.com/2026/11/critical-zoom-workplace-flaw-could.html

### What should Zoom users do?

Update Zoom Workplace for Windows to the version Zoom released with this fix. Confirm the installed version in the Zoom client before and after updating. Review Windows systems running Zoom for signs of unexpected privilege changes.

### Does it have a CVE?

Yes. It is tracked as CVE-2026-108186.

Source: https://cve.now/CVE-2026-108186

## Tracked as

- [CVE-2026-108186](https://cve.now/CVE-2026-108186.md)

## Related

- Browse: [Early warnings](https://cve.now/early-warnings.md)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/SZB-95bc7c63c8
Site guide for agents: https://cve.now/llms.txt