CVE-2023-36536
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The installer for Zoom Rooms for Windows before version 5.15.0 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
Risk Assessment
The organization may be exposed to unauthorized access to elevated privileges by users, potentially leading to serious security breaches.
Recommendation
It is recommended to update Zoom Rooms to version 5.15.0 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Zoom Rooms for Windows
See all- CVE-2026-30901High
Improper Input Validation in Zoom Rooms for Windows before version 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
- CVE-2023-39212High
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.
- CVE-2023-36538High
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-36537High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-34119High
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-34118High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Original NVD description (English source)
Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.