Skip to content
OpenAdvisories
Medium · 4.1 CVE-2023-34121 EUVD-2023-38223GHSA-3r5h-mjx6-6cjh

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated us…

Published Jun 13, 2023 · Updated Jan 2, 2025 · Assigned by Zoom

Vendor: Zoom Video Communications Vendor: ZoomZoom Video Communications Product: Zoom for Windows Product: Zoom Rooms Client for Windows Product: Zoom VDI for Windows Meeting Clients Platform: Windows

Description

Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom for Windows before 5.14.0 —
Zoom Video Communications Zoom Rooms Client for Windows before 5.14.0 —
ZoomZoom Video Communications Zoom VDI for Windows Meeting Clients before 5.14.0 —

Advisories 1

References