Paper/Archive/CVE-2023-36534

CVE-2023-36534

Zoom Video Communications, Inc. Zoom Desktop Client for Windows — Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege vi…

EPSS 2%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 75.6.756 × 2015.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

Affected

ProductAffectedFixed inSource

Zoom Desktop Client for Windowsbefore 5.14.7–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Zoom (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refexplore.zoom.us/en/trust/security/security-bulletin