Zoom has released updates for its Zoom Workplace app on Windows to fix two security weaknesses. One is rated critical, with a severity score of 9.6 out of 10, and the other is rated 8.1.
Both flaws could let an attacker over a network gain more control on a computer than they should have, a problem known as privilege escalation. The attacker would not need a Zoom login or any special permissions to try it.
The critical flaw affects Zoom Workplace for Windows from version 7.1.0 up to, but not including, 7.1.8. The second flaw affects versions before 7.1.5. Zoom has not said that either flaw is being used in real attacks, but it recommends installing the latest update.
This is not the first serious fix this year. In July, Zoom patched another critical flaw in the Windows app that could have allowed attackers to take over accounts. For businesses that rely on Zoom for client meetings and telehealth, keeping the app current is a simple and important habit.
What you should do
- Update Zoom Workplace on every Windows computer in your office to version 7.1.8 or later.
- Check the Zoom version on each PC by opening the app and looking for updates from the profile menu.
- Turn on automatic updates for Zoom where your settings allow it.
- Remove old or unused copies of Zoom from computers that no longer need it.
- Ask Computech to confirm that Zoom is updated across all of your company's computers.
Computech prepares these summaries with AI assistance, based on public news reports. See the original report for full details.
