CVE-2023-39212
HighCVSS 7.9Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.
Risk Assessment
The organization may be vulnerable to denial of service attacks, potentially leading to downtime of the Zoom Rooms application.
Recommendation
It is recommended to update Zoom Rooms to version 5.15.5 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Rooms for Windows
See all- CVE-2026-30901High
Improper Input Validation in Zoom Rooms for Windows before version 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.
- CVE-2023-36538High
Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-36537High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-36536High
The installer for Zoom Rooms for Windows before version 5.15.0 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
- CVE-2023-34119High
Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
- CVE-2023-34118High
Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
Original NVD description (English source)
Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access.