A detailed explainer is available in Japanese.
Read the Japanese explainer
Critical
9.6
Zoom Workplace Windows版の脆弱性、修正版あり
CVE-2026-108186
First seen on SecPulse
Summary
Windows版Zoom Workplaceの7.1.0以上7.1.8未満に、認証なしでネットワーク越しに権限を昇格できる脆弱性があります。7.1.8へ更新し、社内の端末の版を洗い出してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Windows版Zoom Workplaceの7.1.0以上7.1.8未満に、認証なしでネットワーク越しに権限を昇格できる脆弱性があります。7.1.8へ更新し、社内の端末の版を洗い出してください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| Zoom CommunicationsZoom Workplace |
≥ 7.1, < 7.1.8→ 7.1.8 |
7.1.8 |
Original description The description as published by the source.
Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web zoom.com
- web nvd.nist.gov
- web github.com