11 Nov Critical Zoom Flaw on Windows: Update to 7.1.8 Now
What happened
On November 10, Zoom published a security bulletin for a critical flaw in Zoom Workplace for Windows, the desktop app most offices use for meetings. It’s tracked as CVE-2026-108186 and scores 9.6 out of 10.
The flaw could let an attacker with no account and no password gain higher-level access over the network. The attack does need the user to take some action, so staff awareness still matters.
Zoom also fixed a related flaw, CVE-2026-108187, scored 8.1. Version 7.1.8 covers both.
There are no reports of attackers using either flaw yet. That’s the good news, and it’s the reason to act now. Once a fix is public, attackers can study it to find the weakness. The quiet window to patch is this week.
This is also the second critical Zoom for Windows flaw this year. Zoom fixed a 9.8-rated flaw in July.
Who is affected
Any Windows PC running Zoom Workplace version 7.1.0 up to, but not including, 7.1.8. This bulletin covers Windows only.
That includes most clinics running telehealth visits, credit unions holding board meetings, and nonprofits meeting with volunteers. In our experience, the PC that gets missed is the shared one: the front desk machine, the conference room computer, or the spare laptop in the closet.
What to do this week
- Check for updates. Open Zoom, click your profile picture, and choose Check for Updates. You want version 7.1.8 or later.
- Update every Windows PC, including the shared and conference room machines. You can also download the latest version from zoom.us/download.
- Restart Zoom after the update so the fix takes effect.
- Ask your IT provider one question: “Do apps like Zoom get patched automatically, or only Windows?”
- Remind staff to be careful with links and meeting invites they weren’t expecting.
How Bytagig helps
Apps like Zoom, Chrome and Adobe usually sit outside Windows Update, so they’re the first things to fall behind. Keeping third-party apps current is part of patch management, and it’s the part most often skipped. We help offices close that gap.
Not sure if you’re exposed?
Book a free 15-minute check, or take our Cybersecurity Quiz.