CVE-2026-108187
Awaiting Analysis
Awaiting Analysis - Queue
Zoom Workplace Privilege Escalation via Origin Validation Error
Vulnerability report for CVE-2026-108187, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-10
Last updated on: 2026-11-10
Assigner: Zoom Video Communications, Inc.
Description
Description
Origin Validation Error in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Zoom Communications | Zoom Workplace | From 0 (inc) to 7.1.5 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-346 | The product does not properly verify that the source of data or communication is valid. |
