Two Serious Security Flaws in Zoom Workplace Raise Fears of Remote Computer Takeover
Two security flaws have been identified in the Zoom Workplace software running on the Windows operating system. The risk from one of them is extremely high. By exploiting the two flaws, cyber attackers can increase their control over an affected computer from a distance, without any kind of permission.
To address the security risk, video conferencing platform Zoom has released a new version of the software fixing both flaws. It has advised users of older versions to install the updated version quickly.
The first of the two flaws is named 'CVE-2026-108186'. On the CVSS scale, its risk level is 9.6. The flaw arose because information received from users was not properly validated in the software.
Exploiting this flaw, cyber attackers can enter an affected computer remotely through the network and increase their level of control over it. They need no approval or special access rights to do so.
The second flaw, named 'CVE-2026-108187', has a risk level of 8.1. It arose from a weakness in validating the origin of information in the software. It too can be exploited through the network, giving attackers the chance to enter a computer remotely without approval.
According to Zoom, the second flaw is present in versions of Zoom Workplace before 7.1.5. The first flaw, meanwhile, is present in versions from 7.1.0 up to before 7.1.8. In other words, users of older versions of the software are exposed to these security risks.
Earlier, in July, Zoom had also released an updated version to fix a serious security flaw in Zoom Workplace for Windows. That flaw, named 'CVE-2026-53412', had a risk level of 9.8, and exploiting it made it possible to take control of a user's account without any approval.
Zoom has not said whether any actual cyber attack has taken place by exploiting the two new flaws. However, to stay safe from possible cyber attacks, the company has advised Windows users to install the latest version of Zoom Workplace quickly.
