CVE Catalog

CVE-2023-36539

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

35th percentile - higher than 35% of all known CVEs

Summary

Some Zoom clients may expose information intended to be encrypted, potentially leading to the disclosure of sensitive data.

Risk Assessment

The disclosure of sensitive information may lead to privacy violations for users and increase the risk of attacks on the organization.

Recommendation

It is recommended to update Zoom clients to the latest version and monitor access to sensitive data.

Original NVD description (English source)

Exposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS