CVE-2023-36533

HighCVSS 7.1

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

49th percentile - higher than 49% of all known CVEs

Summary

Uncontrolled resource consumption in Zoom SDKs before version 5.14.7 may allow an unauthenticated user to trigger a denial of service attack via network access.

Risk Assessment

The organization may be vulnerable to attacks that lead to service unavailability of Zoom, impacting operational continuity and communication.

Recommendation

It is recommended to update the Zoom SDK to version 5.14.7 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Zoom SDK

CVE-2023-39217Medium
Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access.

Original NVD description (English source)

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS