CVE-2026-108186 PUBLISHED

Assigner: Zoom
Reserved: 09.10.2026 Published: 10.11.2026 Updated: 10.11.2026

Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS Score: 9.6

Product Status

Vendor Zoom Communications
Product Zoom Workplace
Versions Default: unaffected
  • affected from 7.1 to 7.1.8 (excl.)

References

Problem Types

  • CWE-20 Improper input validation CWE