Critical Zoom Workplace Vulnerability Could Allow Remote Privilege Escalation on Windows Systems
Zoom has released important security updates after discovering two vulnerabilities in its Zoom Workplace application for Windows computers. One of these security issues is considered critical because it could allow hackers to gain greater control over an affected computer without needing a username, password, or permission from the user.
The two vulnerabilities, identified as CVE-2026-108186 and CVE-2026-108187, could give attackers access to higher levels of control on a computer than they should normally have. In simple terms, this means someone could potentially take advantage of a weakness in Zoom to gain additional access to a system, even without logging into an account first. The more serious of the two vulnerabilities received a severity score of 9.6 out of 10, making it an especially important issue to address.
The security problems affect certain versions of Zoom Workplace for Windows. One vulnerability impacts versions released before 7.1.5, while the more serious issue affects versions starting with 7.1.0 and released before 7.1.8. Anyone using an older version should make sure their Zoom application is updated to the latest available version.
This is not the first time Zoom has had to address a serious security issue. Earlier in July, the company released another update to fix a vulnerability that could potentially allow attackers to take control of user accounts. That issue received an even higher severity score of 9.8 out of 10, showing that security weaknesses in commonly used applications can create significant risks for individuals and businesses.
Although there have been no reports confirming that these newly discovered vulnerabilities are actively being used by hackers, that does not mean users should ignore them. Cybercriminals often look for security weaknesses in popular applications because so many people and organizations rely on them every day.
The best way to reduce the risk is to keep Zoom updated and install security fixes as soon as they become available. Businesses should also make sure employees are using supported versions of the software. Keeping applications up to date is a simple but important step in protecting personal information, company data, and computer systems from potential cyberattacks.
