Security AlertCritical
Zoom patches critical Workplace for Windows privilege escalation bugs
Nov 11, 2026 · Summarized by Fundy Tech from 2 sources
The 30-second version
Zoom fixed two security flaws in Zoom Workplace for Windows, including a critical privilege escalation bug. The company says users should update to the latest version.
Key points
- CVE-2026-108186 and CVE-2026-108187 affect Zoom Workplace for Windows.
- Version 7.1.8 and later contain the fixes.
- Zoom says it has no evidence the bugs were exploited in the wild.
Why it matters
If your team uses Zoom on Windows, update quickly to reduce the risk of unauthorised privilege escalation. For small businesses, a compromised meeting app can become a foothold on a work device. Keeping collaboration tools current is part of basic security hygiene.
Who’s affected: Zoom Workplace for Windows users
What to do
- Update Zoom Workplace for Windows to version 7.1.8 or later.
- Review which staff devices run Zoom on Windows.
- Restart affected devices after updating if needed.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.