#privilege escalation

2 articles

Zoom Workplace Flaw CVE-2026-108186: Update on Windows

Zoom released updates fixing two flaws in Zoom Workplace for Windows, including the critical `CVE-2026-108186` (CVSS 9.6), which could let an unauthenticated user escalate privileges over the network.

November 15, 2026

🧩 CVEs

SignDrop Windows CLFS Zero-Day Grants SYSTEM Access

A researcher released SignDrop, a public exploit that claims a standard Windows user can escalate to SYSTEM through the CLFS driver. Microsoft has not confirmed the flaw, assigned a CVE or shipped a fix.

November 15, 2026