Privilege Escalation Vulnerability in Zoom Rooms for macOS
CVE-2023-43590

7.8HIGH

Key Information:

Vendor

Zoom Video Communications, Inc.
Status
Zoom Rooms For Mac OS
Vendor
CVE Published:
15 November 2023

What is CVE-2023-43590?

A vulnerability in Zoom Rooms for macOS, present in versions prior to 5.16.0, allows an authenticated user to perform privilege escalation following local access. This could enable malicious users to gain elevated permissions and potentially alter system configurations or access sensitive information within the compromised system. Users are strongly advised to update to the latest version to mitigate any risks associated with this vulnerability.

Affected Version(s)

Zoom Rooms for macOS MacOS before 5.16.0

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.