The National Center for Information Security warns of two security holes in the "Zoom" application.
Details:
The National Center for Information Security has warned of the presence of two security holes in the Zoom Workplace application in the Windows system, which may allow attackers across the network to escalate privileges without prior authentication, while requiring user interaction to complete the exploitation process.
The center explained that Zoom classified the CVE-2026-108186 vulnerability as critical, with a score of 9.6 on the CVSS scale, while the second vulnerability, CVE-2026-108187, was classified as high risk.
The center recommended updating the application immediately to the latest official version, no less than version 7.1.8, to address the two vulnerabilities, calling to review the activity records to monitor any unusual use, and to perform the update through the company's official website or through the option to check for updates within the application.