Skip to content
OpenAdvisories
Critical · 9.6 CVE-2023-39213 EUVD-2023-42947GHSA-6rv3-82jq-3r4c

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticat…

Published Aug 8, 2023 · Updated Oct 10, 2024 · Assigned by Zoom

Vendor: Zoom Video Communications Product: Zoom Desktop Client for Windows and Zoom VDI Client Platform: Windows

Description

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 —

References