Live threats
HighUnpatched Check Point Gateways Exploited via PHP2Shell, Granting Root Access and Enabling Wiper Attacks BreachUS DOJ Seizes $1.2 B Stolen from Binance Theft and Disrupts North Korean ‘FaceStealer’ Social‑Engineering Tool Rule changeFederal Register limits automated scraping of its sites, directing users to APIs DeadlineFarm Credit Administration amends employee payroll system of records under Privacy Act, effective Nov 24, 2026 CriticalCritical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images BreachHackers Compromise 4,800 GitHub Accounts to Steal Cloud Credentials and CI Secrets Rule changeEFF warns ambient surveillance devices expand privacy risks for bystanders CriticalNew Windows “SignDrop” Zero‑Day Lets Attackers Escalate to SYSTEM Privileges
Updated 08:43 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF Critical ☁️ Vulnerability

Zoom Patches Critical Windows Privilege‑Escalation Flaws (CVE‑2026‑108186 & CVE‑2026‑108187)

Zoom released patches for two critical Windows flaws that allow unauthenticated attackers to elevate privileges and execute code on meeting participants’ machines. The vulnerabilities underscore the importance of verifying access‑control controls and maintaining auditable patch‑management evidence.

ADTP Breach Watch · November 12, 2026 · Security Affairs
SeverityCritical
Type☁️ Vulnerability
ConfidenceHigh
ReportedNov 12, 2026
Technology & SaaS TECH_SAAS Vulnerability Exploit

What happened

Zoom disclosed CVE‑2026‑108186 and CVE‑2026‑108187, two unauthenticated privilege‑escalation bugs in Zoom Workplace for Windows. Both could be exploited via a crafted network message to gain higher system privileges, execute code, and control cameras or microphones. Zoom issued patches (≥ 7.1.8) and urges immediate deployment.

Why it matters for trust and compliance

  • These flaws bypass identity safeguards, making it essential to prove that access‑control policies are enforced and that patch remediation is continuously documented for audit readiness.
  • Enable continuous monitoring of patch deployment to satisfy evidence‑collection requirements.
  • Map privilege‑escalation controls to your framework of record to demonstrate risk mitigation.

Who is affected

TECH_SAAS

Recommended actions

  1. Apply the latest Zoom Workplace update (7.1.8 or newer) on all Windows endpoints.
  2. Validate patch installation with automated asset‑inventory tools and retain logs for audit.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.