CVE Catalog
CVE-2023-39213
CriticalCVSS 9.6Exploitation Probability (EPSS)
Elevated risk1.29%
66th percentile - higher than 66% of all known CVEs
Summary
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before version 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update the Zoom client to version 5.15.2 or newer to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.