CVEvulnerability
CVE-2023-34121
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-06-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-79
Description
Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via network access.
Affected configurations
• zoom rooms (< 5.14.0)
• zoom zoom (< 5.14.0)
• zoom virtual desktop infrastructure (< 5.14.0)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://explore.zoom.us/en/trust/security/security-bulletin/ Vendor Advisory
- https://explore.zoom.us/en/trust/security/security-bulletin/ Vendor Advisory