Zoom patches two network privilege-escalation flaws that need no authentication on Windows
On November 11, 2026 Zoom shipped two fixes for Zoom Workplace on Windows, including a CVSS 9.6 privilege-escalation bug exploitable remotely without authentication. Upgrade to 7.1.8 and audit every endpoint, because the same class of flaw has now returned for the third time since July.