{"id":"CVE-2026-108187","kind":"vulnerability","aliases":["CVE-2026-108187"],"related":[],"title":"Zoom Workplace for Windows: origin check flaw allows privilege escalation over network","description":"Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.","summary":"Zoom Workplace for Windows has an origin validation error that lets an unauthenticated user escalate privileges through network access. An attacker who reaches the affected client could gain higher rights on the Windows machine.","severity":"high","cvss":8.1,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Zoom Workplace for Windows","fixed":["7.1.5"],"affected":"< 7.1.5","ecosystem":"vendor"}],"ecosystems":[],"tags":["desktop-client","vendor","windows","zoom"],"not_affected_if":[],"how_to_check":"Open Zoom Workplace on Windows > profile picture > Settings/About (or Help > About Zoom) and read the version. Versions below 7.1.5 are affected. Zoom's bulletin lists only Zoom Workplace for Windows; other Zoom clients are not named.","fix":"Update Zoom Workplace for Windows to 7.1.5 or later (latest from https://zoom.us/download)","status":"open","published_at":"2026-11-10T16:17:14+00:00","first_seen_at":"2026-11-10T16:22:32+00:00","triaged_at":"2026-11-10T16:23:24+00:00","updated_at":"2026-11-10T16:25:55+00:00","category":"vendor","confidence":0.8,"triage":{"at":"2026-11-10T16:23:24Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Zoom Workplace for Windows: origin check flaw allows privilege escalation over network","impact":"high","summary":"Zoom Workplace for Windows has an origin validation error that lets an unauthenticated user escalate privileges through network access. An attacker who reaches the affected client could gain higher rights on the Windows machine.","audience":"businesses","category":"vendor","nicknames":[],"who_cares":["zoom","windows"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker gains elevated privileges on a Windows machine over the network","analyst_note":"Find affected Zoom Workplace for Windows versions and the fixed release in Zoom's security bulletin for this CVE.","how_to_check":"- Open Zoom Workplace on Windows and check the installed version under the About menu\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Zoom Workplace for Windows clients. The sources do not name affected versions or the specific network path, so the exposed configuration is unknown.","user_interaction":"unknown","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000668,"input_tokens":4505,"output_tokens":435,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected Zoom Workplace for Windows versions and the fixed release in Zoom's security bulletin for this CVE.","search":"'-108187':15A,18A '-2026':14A,17A 'access':47B,84C 'affect':53B 'allow':8A,72C 'attack':49B 'check':6A 'client':25B,54B 'conduct':77C 'could':55B 'cve':13A,16A 'desktop':24B 'desktop-cli':23B 'error':37B,65C 'escal':10A,43B,79C 'flaw':7A 'for':21A 'gain':56B 'higher':57B 'let':39B 'machin':62B 'may':71C 'network':12A,46B,83C 'origin':5A,35B,63C 'privileg':9A,44B,81C 'reach':51B 'right':58B 'unauthent':41B,74C 'user':42B,75C 'valid':36B,64C 'vendor':26B 'via':82C 'window':4A,27B,32B,61B,70C 'windows':22A 'workplac':2A,30B,68C 'workplace':20A 'zoom':1A,19A,28B,29B,67C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Zoom Workplace for Windows older than 7.1.5. Per the CVSS vector the attacker needs network access and no login but some user interaction. Zoom has not published the exact path. Macs, Linux, mobile and other Zoom products are not listed in the bulletin; Windows machines with an up-to-date Zoom (7.1.5+) can skip it.","tier":"B","verified":{"fix":{"at":"2026-11-10T16:25:55Z","by":"analyst","doc":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","run_id":2470},"products":{"at":"2026-11-10T16:25:55Z","by":"analyst","doc":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","run_id":2470},"how_to_check":{"at":"2026-11-10T16:25:55Z","by":"analyst","doc":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","run_id":2470},"who_affected":{"at":"2026-11-10T16:25:55Z","by":"analyst","doc":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","run_id":2470}},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":["workplaceforwindows","zoomworkplaceforwindows"],"ptokens":["for","windows","workplace","zoom"],"labels":["desktopclient","high","vendor","windows","zoom"],"campaign_type":null,"search_a":"'-108187':15A,18A '-2026':14A,17A 'allow':8A 'check':6A 'cve':13A,16A 'escal':10A 'flaw':7A 'for':21A 'network':12A 'origin':5A 'privileg':9A 'window':4A 'windows':22A 'workplac':2A 'workplace':20A 'zoom':1A,19A","search_b":"'access':47B 'affect':53B 'attack':49B 'client':25B,54B 'could':55B 'desktop':24B 'desktop-cli':23B 'error':37B 'escal':43B 'gain':56B 'higher':57B 'let':39B 'machin':62B 'network':46B 'origin':35B 'privileg':44B 'reach':51B 'right':58B 'unauthent':41B 'user':42B 'valid':36B 'vendor':26B 'window':27B,32B,61B 'workplac':30B 'zoom':28B,29B","search_c":"'access':84C 'allow':72C 'conduct':77C 'error':65C 'escal':79C 'may':71C 'network':83C 'origin':63C 'privileg':81C 'unauthent':74C 'user':75C 'valid':64C 'via':82C 'window':70C 'workplac':68C 'zoom':67C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T16:17:14+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","cvss_by":"security@zoom.us","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-108187","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-108187","severity":null,"published_at":"2026-11-10T16:17:14+00:00","modified_at":"2026-11-10T16:17:14+00:00","first_seen_at":"2026-11-10T16:22:32+00:00","fetched_at":"2026-11-10T16:22:32+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-108187:2470","url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","severity":null,"published_at":"2026-11-10T16:25:55+00:00","modified_at":"2026-11-10T16:25:55+00:00","first_seen_at":"2026-11-10T16:25:55+00:00","fetched_at":"2026-11-10T16:25:55+00:00","note":"Read Zoom ZSB-26024: affected Workplace for Windows before 7.1.5; fix is 7.1.5 or later (bulletin gives only 'before 7.1.5' and 'apply latest'). No exploitation or PoC noted. X and search not used. Vector has UI:R, so user interaction is needed (triage said unauthenticated only).","cites":["https://www.zoom.com/en/trust/security-bulletin/zsb-26024/"]}],"documents":[{"id":116254,"url":"https://www.zoom.com/en/trust/security-bulletin/zsb-26024/","title":"ZSB-26024 Zoom Workplace for Windows - Origin Validation Error","kind":"vendor","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}