CVEvulnerability

CVE-2023-43586

8.8 HIGH Published 2023-12-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.3 HIGH — CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22, CWE-426

Description

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.

Affected configurations

• zoom meeting software development kit (< 5.16.5) • zoom video software development kit (< 5.16.5) • zoom virtual desktop infrastructure (< 5.14.14) • zoom virtual desktop infrastructure (>= 5.15.0 < 5.15.12) • zoom zoom (< 5.16.5)

Related

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-426 Untrusted Search Path weakness

References