Paper/Archive/CVE-2023-39216

CVE-2023-39216

Zoom Video Communications, Inc. Zoom Desktop Client for Windows — Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of p…

EPSS 1%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 68.9.689 × 2013.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

Affected

ProductAffectedFixed inSource

Zoom Desktop Client for Windowsbefore 5.14.7–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Zoom (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refexplore.zoom.us/en/trust/security/security-bulletin