Description

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.

Related CPE's

a

zoom

virtual_desktop_infrastructure

Vulnerable

a

zoom

zoom

*

*

*

*

*

windows

Vulnerable

References

https://explore.zoom.us/en/trust/security/security-bulletin/

Vendor Advisory

https://explore.zoom.us/en/trust/security/security-bulletin/

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-176

[email protected]

Primary
CWE-74

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.6 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-08T20:15:10.657Z

2 years ago

Last modified

2024-11-21T07:14:55.670Z

1 year ago