Zoom Patches Four High-Severity Flaws in Workplace Clients, Including Privilege Escalation Bugs

Zoom published four high-severity vulnerabilities in Zoom Workplace (Oct 13, 2026): two allow privilege escalation (CVE-2026-53418, CVE-2026-53420) and two can leak data due to weak certificate validation (CVE-2026-108184, CVE-2026-108185); all are network-triggerable, affect multiple platforms and builds, no exploitation has been reported, and updating to the listed Zoom Workplace/VDI/Zoom Rooms builds (e.g., 7.2.0/7.2.1, 7.0.13, 7.1.7) addresses the issues.