High · 7.7 CVE-2023-28603 EUVD-2023-32273GHSA-4g7c-75vj-hqfj

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local …

Published Jun 13, 2023 · Updated Jan 2, 2025 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom VDI Windows Meeting Client Platform: Windows

Description

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions.

Affected products

Vendor	Product	Affected	Fixed
Zoom Video Communications	Zoom VDI Windows Meeting Client	before 5.14.0	—

References

https://explore.zoom.us/en/trust/security/security-bulletin/