Low · 2.8 CVE-2023-28602 EUVD-2023-32272GHSA-2c5r-8h52-phwr

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may po…

Published Jun 13, 2023 · Updated Jan 2, 2025 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom for Windows Client Platform: Windows

Description

Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions.

Affected products

Vendor	Product	Affected	Fixed
Zoom Video Communications	Zoom for Windows Client	before 5.13.5	—

References

https://explore.zoom.us/en/trust/security/security-bulletin/