Improper Privilege Management in Zoom Rooms for Windows by Zoom
CVE-2023-36537

7.8HIGH

Key Information:

Vendor: Zoom Video Communications, Inc.
Status: Zoom Rooms For Windows
Vendor: CVE Published:; 11 July 2023

🔔 Create Zoom Video Communications, Inc. Vulnerability Alert

What is CVE-2023-36537?

Zoom Rooms for Windows experienced an issue where improper privilege management could allow an authenticated user to escalate their privileges through local access. This vulnerability existed in versions prior to 5.14.5, posing potential risks to system integrity and user data. It is crucial for users to update to the latest version to mitigate these vulnerabilities and enhance security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Zoom Rooms for Windows before 5.14.5

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:

7.8

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Jul 11, 2023
Vulnerability Reserved
Jun 22, 2023

JSON

Zoom Video Communications, Inc.

What is CVE-2023-36537?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.