CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
References
Configurations

Configuration 1 (hide)

cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*

History

11 Aug 2023, 14:22

Type Values Removed Values Added
CPE cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
References (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - (MISC) https://explore.zoom.us/en/trust/security/security-bulletin/ - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-426
First Time Zoom
Zoom zoom

08 Aug 2023, 18:33

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-08 18:15

Updated : 2023-12-10 15:14


NVD link : CVE-2023-36540

Mitre link : CVE-2023-36540

CVE.ORG link : CVE-2023-36540


JSON object : View

Products Affected

zoom

  • zoom
CWE
CWE-426

Untrusted Search Path