A vulnerability in Zoom Workplace for Windows allows local authenticated users to escalate privileges, posing a significant risk to system integrity.

This is an improper privilege management flaw (CWE-269) within the Zoom client for Windows. The vulnerability requires the attacker to be an authenticated user with local access to the target machine to successfully trigger the privilege escalation.

Successful exploitation of this vulnerability allows an authenticated local user to gain unauthorized elevated privileges on the host system. This level of access could lead to full system compromise, including the ability to install malicious software, access sensitive data, or modify system configurations, justifying the high CVSS score of 7.8.

Immediate Action: Review the official Zoom security bulletin (ZSB-26004) to identify the specific patched versions for your installation and update the software immediately.

Proactive Monitoring: Monitor local system logs for unusual process execution or unauthorized changes to administrative account privileges.

Compensating Controls: Implement endpoint detection and response (EDR) solutions to identify and block suspicious local privilege escalation attempts.

Public Exploit Available: No

Given the high severity of potential privilege escalation, organizations should prioritize updating all Zoom Workplace client instances on Windows systems. Administrators should verify the specific versions mentioned in the official Zoom security advisory to ensure complete coverage across their environment.