[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1SmiCveJyh5OxkqsRVG1zJUOq32QErj5pP1xH9yxLW4":3},{"article":4,"iocs":31,"watch_terms":39,"solutions":40,"lesson":126},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"59c6da3d-783f-4474-b251-d2e6a543ddb3","Zoom Fixes Critical Windows Vulnerability Allowing Privilege Escalation","zoom-fixes-critical-windows-vulnerability-allowing-privilege-escalation-bf168e","Zoom fixes two Windows Workplace flaws, including a critical bug that could let unauthenticated attackers remotely escalate privileges. Zoom has released security updates to fix two vulnerabilities in Zoom Workplace for Windows. One is critical and could let attackers gain higher privileges on affected systems. The vulnerabilities are: If successfully exploited, either vulnerability could allow […]","Zoom has released security updates for Zoom Workplace for Windows to address two vulnerabilities. CVE-2026-108186 (CVSS 9.6) is an input validation flaw, and CVE-2026-108187 (CVSS 8.1) is an origin validation flaw, both allowing unauthenticated attackers to gain higher privileges remotely. The company recommends users install the latest updates to protect their systems.","Zoom fixes two critical Windows vulnerabilities allowing privilege escalation.","https:\u002F\u002Fsecurityaffairs.com\u002F202911\u002Fsecurity\u002Fzoom-fixes-critical-windows-vulnerability-allowing-privilege-escalation.html","https:\u002F\u002Fsecurityaffairs.com\u002Fwp-content\u002Fuploads\u002F2020\u002F06\u002Fzoom-logo-999x666-1.jpg","2026-11-12T12:33:13+00:00","2026-11-12T14:00:25.848555+00:00",8,[17,20],{"name":18,"type":19},"Zoom Workplace","product",{"name":21,"type":22},"Zoom","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},[32,36],{"type":33,"value":34,"context":35},"cve","CVE-2026-108186","Input validation flaw allowing privilege escalation",{"type":33,"value":37,"context":38},"CVE-2026-108187","Origin validation flaw allowing privilege escalation",[21,18],{"controls":41,"vendors":125},[42,71,96],{"slug":43,"name":44,"problem":45,"products":46},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[47,55,63],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":56,"vendor_name":57,"vendor_logo":58,"product_slug":59,"product_name":60,"url":61,"description":62},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":72,"name":73,"problem":74,"products":75},"patch-management","Automated patch management","Known holes get closed in days, not months.",[76,84,92],{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":72,"product_name":93,"url":94,"description":95},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":97,"name":98,"problem":99,"products":100},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",[],{"slug":127,"title":128,"body":129,"framework_refs":130,"framework_notes":136},"critical-zoom-flaws-let-unauthenticated-attackers-escalate-privileges-on-windows","Critical Zoom Flaws Let Unauthenticated Attackers Escalate Privileges on Windows","Two high-severity vulnerabilities in Zoom Workplace for Windows — an input validation flaw (CVSS 9.6) and an origin validation flaw (CVSS 8.1) — allow unauthenticated remote attackers to escalate privileges on affected systems. These flaws are particularly dangerous because no authentication is required, meaning any network-accessible attacker can potentially gain elevated control without prior credentials. The vulnerabilities highlight the ongoing risk posed by widely deployed collaboration software, which sits on nearly every enterprise endpoint. Prompt patching is the only effective mitigation, underscoring why organizations must treat vendor security advisories as urgent operational priorities.",[131,132,133,134,135],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-53 SI-2: Flaw Remediation","OWASP A03:2021 Injection","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":137,"OWASP A03:2021 Injection":138,"NIST SP 800-53 SI-2: Flaw Remediation":139,"CIS Control 7: Continuous Vulnerability Management":140,"CIS Control 2: Inventory and Control of Software Assets":141},"This point requires security in acquisition, development, and maintenance including vulnerability handling, meaning organizations must have processes to act on vendor disclosures like Zoom's security advisory without delay.","The input validation flaw (CVE-2026-108186) reflects a failure to properly validate untrusted input, which OWASP A03 specifically calls out as a leading cause of critical software vulnerabilities.","SI-2 requires organizations to identify, report, and correct information system flaws, directly addressing the need for timely patching of these critical Zoom vulnerabilities.","This control requires organizations to continuously assess and remediate vulnerabilities — a process that would have flagged and prioritized patching the critical Zoom flaws before attackers could exploit them.","Knowing exactly which endpoints run Zoom Workplace for Windows is a prerequisite to ensuring all affected installations receive the patch promptly."]