CVE-2023-36541
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
Risk Assessment
The organization may be exposed to unauthorized access to system resources by users who could exploit this vulnerability to gain elevated privileges.
Recommendation
It is recommended to update the Zoom Desktop Client to version 5.14.5 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Desktop Client for Windows
See all- CVE-2023-39216Critical
Improper input validation in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-36534Critical
Path traversal in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-39209Medium
Improper input validation in Zoom Desktop Client for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36540High
The installer for Zoom Desktop Client for Windows before version 5.14.5 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
- CVE-2023-34116High
Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.
Original NVD description (English source)
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.