CVE-2023-36540
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
The installer for Zoom Desktop Client for Windows before version 5.14.5 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update Zoom Desktop Client to version 5.14.5 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Desktop Client for Windows
See all- CVE-2023-39216Critical
Improper input validation in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-36534Critical
Path traversal in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-39209Medium
Improper input validation in Zoom Desktop Client for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36541High
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
- CVE-2023-34116High
Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.
Original NVD description (English source)
Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.