High · 8.2 CVE-2023-34116 EUVD-2023-38218GHSA-37jr-8vrf-hwhp

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalati…

Published Jul 11, 2023 · Updated Oct 22, 2024 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom Desktop Client for Windows Platform: Windows

Description

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access.

Affected products

Vendor	Product	Affected	Fixed
Zoom Video Communications	Zoom Desktop Client for Windows	before 5.15.0	—

Advisories 1

WID-SEC-2023-1707 Zoom Video Communications Zoom Client: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 11, 2023

References

https://explore.zoom.us/en/trust/security/security-bulletin/