Zoom Rooms and Workplace Flaws Allow Privilege Escalation Attacks

**Executive summary:** A set of newly disclosed Zoom vulnerabilities affect Zoom Rooms for Windows and the Zoom Workplace VDI Plugin (two high-severity privilege-escalation flaws, CVSS 7.8) and Zoom Workplace for iOS (a low-severity information disclosure, CVSS 1.8); Windows issues allow a local authenticated user to escalate to administrative privileges facilitating lateral movement, data theft, or ransomware, and Zoom urges immediate updates to patched versions.