---
id: "CVE-2026-108187"
page: "https://infrastack.ai/live/CVE-2026-108187"
kind: "vulnerability"
aliases: ["CVE-2026-108187"]
title: "Zoom Workplace for Windows: origin check flaw allows privilege escalation over network"
severity: "high"
cvss: 8.1
epss: null
exploited: false
status: "open"
category: "vendor"
products: [{"name": "Zoom Workplace for Windows", "fixed": ["7.1.5"], "affected": "< 7.1.5", "ecosystem": "vendor"}]
ecosystems: []
tags: ["desktop-client", "vendor", "windows", "zoom"]
not_affected_if: []
published_at: "2026-11-10T16:17:14+00:00"
first_seen_at: "2026-11-10T16:22:32+00:00"
updated_at: "2026-11-10T16:25:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-108187", "first_seen_at": "2026-11-10T16:22:32+00:00"}, {"source": "analyst", "url": "https://www.zoom.com/en/trust/security-bulletin/zsb-26024/", "first_seen_at": "2026-11-10T16:25:55+00:00", "cites": ["https://www.zoom.com/en/trust/security-bulletin/zsb-26024/"]}]
exploit_sources: []
---

# Zoom Workplace for Windows: origin check flaw allows privilege escalation over network

Link for people: https://infrastack.ai/live/CVE-2026-108187 (this .md is for agents)

Zoom Workplace for Windows has an origin validation error that lets an unauthenticated user escalate privileges through network access. An attacker who reaches the affected client could gain higher rights on the Windows machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Zoom Workplace for Windows affected < 7.1.5 fixed 7.1.5

## How to check

Open Zoom Workplace on Windows > profile picture > Settings/About (or Help > About Zoom) and read the version. Versions below 7.1.5 are affected. Zoom's bulletin lists only Zoom Workplace for Windows; other Zoom clients are not named.

## Fix

Update Zoom Workplace for Windows to 7.1.5 or later (latest from https://zoom.us/download)

## Timeline

- 2026-11-10T16:22:32+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-108187
- 2026-11-10T16:25:55+00:00 analyst https://www.zoom.com/en/trust/security-bulletin/zsb-26024/ — Read Zoom ZSB-26024: affected Workplace for Windows before 7.1.5; fix is 7.1.5 or later (bulletin gives only 'before 7.1.5' and 'apply latest'). No exploitation or PoC noted. X and search not used. Vector has UI:R, so user interaction is needed (triage said unauthenticated only).

## Documents

- [advisory] ZSB-26024 Zoom Workplace for Windows - Origin Validation Error https://www.zoom.com/en/trust/security-bulletin/zsb-26024/

## From the sources

Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_