CriticalVulnerabilityMonitoringPatch availableCVE-2026-108186CVE-2026-108187
Two unauthenticated privilege-escalation flaws in Zoom Workplace for Windows, the worst rated CVSS 9.6; fixed versions available
Zoom published two security bulletins on November 10, 2026, saying improper input validation flaw CVE-2026-108186 in Zoom Workplace for Windows may let an unauthenticated user escalate privileges via network access, rated Critical with CVSS 9.