CVE Catalog
CVE-2023-39209
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk0.80%
52th percentile - higher than 52% of all known CVEs
Summary
Improper input validation in Zoom Desktop Client for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via network access.
Risk Assessment
The organization may be at risk of confidential information disclosure by authenticated users, potentially leading to privacy breaches and data security issues.
Recommendation
It is recommended to update the Zoom Desktop Client to version 5.15.5 or later to mitigate this vulnerability.
Original NVD description (English source)
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access.