Improper Privilege Management in Zoom Rooms for Windows by Zoom
CVE-2023-36537

7.8HIGH

Key Information:

Vendor

Zoom Video Communications, Inc.
Status
Zoom Rooms For Windows
Vendor
CVE Published:
11 July 2023

What is CVE-2023-36537?

Zoom Rooms for Windows experienced an issue where improper privilege management could allow an authenticated user to escalate their privileges through local access. This vulnerability existed in versions prior to 5.14.5, posing potential risks to system integrity and user data. It is crucial for users to update to the latest version to mitigate these vulnerabilities and enhance security.

Affected Version(s)

Zoom Rooms for Windows before 5.14.5

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.