CVE Catalog

CVE-2023-39216

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.06%

60th percentile - higher than 60% of all known CVEs

Summary

Improper input validation in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

Risk Assessment

The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update the Zoom client to version 5.14.7 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS