CVE-2023-36538
HighCVSS 8.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
Risk Assessment
The organization may be exposed to unauthorized access to elevated privileges, potentially leading to serious security breaches.
Recommendation
It is recommended to update Zoom Rooms to version 5.15.0 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Rooms for Windows
See all- CVE-2026-30901High
Improper Input Validation in Zoom Rooms for Windows before version 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
- CVE-2023-39212High
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.
- CVE-2023-36537High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-36536High
The installer for Zoom Rooms for Windows before version 5.15.0 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
- CVE-2023-34119High
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-34118High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Original NVD description (English source)
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.