Zoom Patches Four High-Severity Flaws in Workplace Clients, Including Privilege Escalation Bugs

TL;DR

Zoom published four security bulletins on October 13, 2026, each covering a high-severity flaw. Two Zoom Workplace vulnerabilities allow privilege escalation, while two others could leak information through weak certificate checks. Updating to Zoom Workplace 7.2.0 or later closes most of them.

Why It Matters

Zoom Workplace runs on desktops and phones across countless companies. As a result, client-side bugs can reach a very large user base. All four flaws can be triggered over the network.

How the Attacks Work

Privilege escalation

• CVE-2026-53418 (CVSS 8.1): improper authorization in the handler for a custom URL scheme in Zoom Workplace for Android.
• CVE-2026-53420 (CVSS 8.0): a buffer overflow in the Zoom Phone feature of Zoom Workplace clients.

Information disclosure

• CVE-2026-108184 (CVSS 7.4): improper certificate validation in certain Zoom clients for Windows.
• CVE-2026-108185 (CVSS 7.4): improper certificate validation in the My Notes feature across all major platforms.

Weak certificate checks can let an attacker positioned on the network intercept traffic and read data.

Exploitation status

Zoom does not report exploitation in the wild. Likewise, no public proof-of-concept has been confirmed.

Affected Versions

• Zoom Workplace clients before 7.2.0 (CVE-2026-53420)
• Zoom Workplace for Android before 7.2.1 (CVE-2026-53418)
• Zoom Workplace for Windows, VDI Client for Windows and Zoom Rooms for Windows on 7.x builds (CVE-2026-108184)
• Zoom Workplace for Windows, macOS, Linux, Android and iOS on 7.x builds (CVE-2026-108185)

Patch and Mitigation Steps

• Update Zoom Workplace to 7.2.0, or 7.1.9 on the older branch.
• On Android, install 7.2.1 or later.
• Update the VDI Client for Windows to 7.0.13 and Zoom Rooms for Windows to 7.1.7.

Full details sit in the Zoom security bulletin page. Admins should push fixes for these Zoom Workplace vulnerabilities through managed updates rather than waiting for users.

×

Support Our Threat Intelligence

Find our vulnerability reports and weekly recaps helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee

PayPal

Select your plan

Free Pro Team

Hover over a plan to see its benefits.

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.