Zoom and Asus issued security patches on Nov. 11, 2026, for flaws in Zoom Workplace for Windows and Asus router firmware. SecurityWeek reported the releases on the same day.
Zoom said it patched two vulnerabilities in Workplace for Windows. One flaw, CVE-2026-108187, carries a CVSS score of 8.1. The vulnerability could let remote, unauthenticated attackers raise their privileges on affected Windows systems.
The company has not said attackers exploited either flaw in the wild. The attacker needs no prior access to the target system. The company says the fixed release is Workplace for Windows version 7.1.8 or newer. That version includes patches for both issues.
Asus issued an advisory covering four router firmware vulnerabilities rated high and medium severity. The flaws could let attackers run arbitrary commands with root-level access on affected routers. Root-level access is the highest privilege level on the device.
The same flaws could let attackers overwrite memory and bring the system down. That memory-corruption flaw stops the system from running.
Asus and Zoom joined other tech companies in issuing fresh security updates this week. Hundreds of patches came from Apple, Fortinet, Citrix, Ivanti, Intel, AMD, Microsoft, Adobe, SAP, and ICS vendors. SecurityWeek described the Asus and Zoom updates as part of this week’s broader patch activity.
Patch status for Zoom is version 7.1.8 or newer. Asus has released its advisory with the fixes. The updates close the described command-execution, privilege-escalation, and memory-corruption paths.
Join the discussion