CVE-2023-39216
CriticalCVSS 9.6Exploitation Probability (EPSS)
Elevated risk60th percentile - higher than 60% of all known CVEs
Summary
Improper input validation in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
Risk Assessment
The organization may be exposed to unauthorized access to systems, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Zoom client to version 5.14.7 or later to mitigate this vulnerability.
Other vulnerabilities in Zoom Desktop Client for Windows
See all- CVE-2023-36534Critical
Path traversal in Zoom Desktop Client for Windows before version 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
- CVE-2023-39209Medium
Improper input validation in Zoom Desktop Client for Windows before version 5.15.5 may allow an authenticated user to enable information disclosure via network access.
- CVE-2023-36541High
Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
- CVE-2023-36540High
The installer for Zoom Desktop Client for Windows before version 5.14.5 has an untrusted search path that may allow an authenticated user to escalate privileges via local access.
- CVE-2023-34116High
Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.
Original NVD description (English source)
Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.