CVE-2020-9767 - A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL

Back Back to CVE browser

HIGH

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL

Published Aug 14, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.80%

Description

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (1)

https://support.zoom.us/hc/en-us/articles/360044350792-Security-CVE-2020-9767
x_refsource_CONFIRMBroken LinkVendor Advisory

Link	Providers	Tags
https://support.zoom.us/hc/en-us/articles/360044350792-Security-CVE-2020-9767		x_refsource_CONFIRMBroken LinkVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 14, 2020

Updated Aug 4, 2024

Reserved Mar 2, 2020

Link CVE-2020-9767

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9767

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9767