CVE-2023-34121

8.8HIGH

Key Information

Vendor
Zoom Video Communications, Inc.
Status
Zoom For Windows
Zoom Rooms Client For Windows
Zoom Vdi For Windows Meeting Clients
Vendor
CVE Published:
13 June 2023

Summary

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.

Affected Version(s)

Zoom for Windows = before 5.14.0

Zoom Rooms Client for Windows = before 5.14.0

Zoom VDI for Windows Meeting Clients = before 5.14.0

Refferences

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.