Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation

Two high-severity vulnerabilities in Zoom Workplace for Windows — an input validation flaw (CVSS 9.6) and an origin validation flaw (CVSS 8.1) — allow unauthenticated remote attackers to escalate privileges on affected systems. These flaws are particularly dangerous because no authentication is required, meaning any network-accessible attacker can potentially gain elevated control without prior credentials. The vulnerabilities highlight the ongoing risk posed by widely deployed collaboration software, which sits on nearly every enterprise endpoint. Prompt patching is the only effective mitigation, underscoring why organizations must treat vendor security advisories as urgent operational priorities.