Skip to content
OpenAdvisories
High · 8.8 CVE-2023-49647 EUVD-2023-53589GHSA-5h3m-5ghj-mxmp

Zoom Desktop Client for Windows - Improper Access Control

Published Jan 12, 2024 · Updated Jun 3, 2025 · Assigned by Zoom

Description

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 before 5.16.0 —

Advisories 1

References