CVE-2023-34116
HighCVSS 8.2Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Zoom Desktop Client to version 5.15.0 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Desktop Client for Windows
See all- CVE-2023-39216Critical
Improper input validation in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-36534Critical
Path traversal in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-39209Medium
Improper input validation in Zoom Desktop Client for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36541High
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
- CVE-2023-36540High
The installer for Zoom Desktop Client for Windows before version 5.14.5 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
Original NVD description (English source)
Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.