Why should I update Zoom on Windows to version 7.1.8 right now?

Zoom’s November 10 bulletins fix a critical flaw rated 9.6 in Zoom Workplace for Windows, plus a high-severity flaw rated 8.1 — and version 7.1.8 closes both. Here is how to update from inside Zoom or the official download page, confirm your version, and avoid fake installer ads.

Your next Zoom call starts in ten minutes, and a little update notice is sitting there looking like it can wait until Friday.Short answer: Do not let it wait. Zoom’s November 10 security bulletins describe a critical flaw in Zoom Workplace for Windows, and updating to version 7.1.8 fixes it — along with a second, high-severity flaw. The update takes a few minutes from inside the app.Why it matters: The critical flaw, CVE-2026-108186, is rated 9.6 out of 10.

It is an improper input validation problem that could let an unauthenticated attacker raise their privileges through network access, and it affects Zoom Workplace for Windows versions from 7.1.0 up to but not including 7.1.8. A second flaw, CVE-2026-108187, is rated 8.1 and involves improper validation of where an action comes from, affecting versions before 7.1.5; version 7.1.8 fixes that one too. Zoom has not reported either flaw being exploited in the wild, and these bulletins do not list Mac, iPhone, or Android versions as affected.How to update safely:1.

Use Zoom’s own updater. Open Zoom on your Windows PC, click your profile picture, and choose Check for Updates.2. Or download only from the official page.

If you would rather install a fresh copy, get it from zoom.us/download and nowhere else.3. Confirm the version number. After updating, check that Zoom shows version 7.1.8 or newer before your next call.4.

Turn on automatic updates. In Zoom’s settings, enable automatic updates so the next serious fix installs without you having to hear about it first.5. Restart Zoom.

Close the app completely and reopen it, so the new version is the one actually running.Common mistake to avoid: Never download Zoom from a pop-up or a search ad. Fake installer ads are a classic way to bundle junk — or worse — onto a PC, and they love exactly the moment when everyone is being told to update at once.Ad’s take: “A 9.6 out of 10 is about as serious as these ratings get, so treat this one as drop-everything. Five minutes now beats explaining later why you skipped it.”