CVE-2023-39214

HighCVSS 7.6

Published: 08/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.81%

52th percentile - higher than 52% of all known CVEs

Summary

Versions of Zoom Client SDK before 5.15.5 may expose sensitive information, allowing an authenticated user to trigger a denial of service attack via network access.

Risk Assessment

The exposure of sensitive information could lead to significant service disruptions, threatening the operational continuity of the organization.

Recommendation

It is recommended to update the Zoom Client SDK to version 5.15.5 or later to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Zoom Client SDK

CVE-2023-34117Low
Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access.

Original NVD description (English source)

Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS