CVE Catalog

CVE-2023-34121

MediumCVSS 4.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.95%

57th percentile - higher than 57% of all known CVEs

Summary

Improper input validation in Zoom for Windows, Zoom Rooms, and Zoom VDI before version 5.14.0 may allow an authenticated user to potentially enable privilege escalation via network access.

Risk Assessment

The organization may be exposed to unauthorized access to system resources, potentially leading to serious security breaches.

Recommendation

It is recommended to update Zoom applications to version 5.14.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS