// ZoomHIGH
Zoom disclosed CVE-2026-108185, a high-severity certificate validation vulnerability (CVSS 7.4) in the My Notes feature affecting Zoom Workplace clients on Windows, macOS, Linux, Android, and iOS. An unauthenticated attacker with network access could exploit improper certificate validation to disclose sensitive information. Zoom published security bulletin ZSB-26022 on October 13, 2026, and advises users to update to fixed releases (7.2.0 or 7.1.9 depending on platform).
- Zoom Certificate Validation Vulnerability Allows Attackers to Ac(opens in a new tab)
- Zoom Patches Four High-Severity Vulnerabilities Enabling Privile(opens in a new tab)
- Weekly Threat Landscape Digest - Week 42 - HawkEye(opens in a new tab)
// Get alerts for Zoom