[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

official (Zoom security bulletins ZSB-26023 and ZSB-26024, Nov 10, 2026); Zoom does not report exploitation

Zoom fixes a critical 9.6 privilege escalation in Zoom Workplace for Windows; update to 7.1.8

  • Do now: push Zoom Workplace for Windows 7.1.8 or later through your software deployment tool and check for machines stuck on older builds.
  • Severity detail: the CVSS vector for CVE-2026-108186 (AV:N/AC:L/PR:N/UI:R/S:C) needs user interaction and has a changed scope, so impact can reach beyond the Zoom app. Zoom Offensive Security found it internally.
  • Zoom gives no further technical detail and does not report exploitation; neither CVE is in CISA KEV.

Sources: Zoom ZSB-26023: Zoom Workplace for Windows - Improper Input Validation (CVE-2026-108186) · Zoom Security Bulletins (ZSB-26023 and ZSB-26024, Nov 10, 2026)