CVE-2026-108187
High CVSS 8.1Published 2026-11-10 ยท last changed 2026-11-13
From our blog
The fix
These are the fixed versions from our post on CVE-2026-108187. The vendor's advisory has anything released since.
| Product | Affected | Fixed in |
|---|---|---|
| Zoom Workplace for Windows | before 7.1.5 | 7.1.5 (7.1.8 fixes both) |
The post also shows how to check each machine and what to do about it.
What it is
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
Affected software
- zoom workplace (before 7.1.5)
From the vendor's own CVE record. NVD hasn't analyzed this CVE yet, so RFF matches on these versions until it does, and switches to NVD's list once it's published.
Sources
- NVD record for CVE-2026-108187
- The vendor's CVE record (cve.org), NVD hasn't analyzed it yet (RFF fetched it 2026-11-15)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N