High · 7.4 CVE-2023-34114 EUVD-2023-38216GHSA-385w-hjpp-r4cx

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to poten…

Published Jun 13, 2023 · Updated Jan 2, 2025 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom for macOS Client Product: Zoom for Windows Client Platform: macOS Platform: Windows

Description

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access.

Affected products

Vendor	Product	Affected	Fixed
Zoom Video Communications	Zoom for Windows Client	before 5.14.10	—
Zoom Video Communications	Zoom for MacOS Client	before 5.14.10	—

Advisories 1

WID-SEC-2023-1428 Zoom Video Communications Zoom Client und Zoom On-Premise: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 12, 2023

References

https://explore.zoom.us/en/trust/security/security-bulletin/

CNA	v3.1	7.4
EUVD	v3.1	7.4