CVE-2023-39211 - Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access

Back Back to CVE browser

HIGH

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access

Published Aug 8, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.21%

Description

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access.

Affected products

Vendor Zoom Video Communications, Inc. Product Zoom Desktop Client for Windows and Zoom Rooms for Windows Default
unaffected
Affected
- before 5.15.5

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Zoom Video Communications, Inc.	Zoom Desktop Client for Windows and Zoom Rooms for Windows	unaffected	Affected before 5.15.5

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-269

Improper Privilege Management

CWE-347

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42945
Advisory
https://explore.zoom.us/en/trust/security/security-bulletin/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-42945		Advisory
https://explore.zoom.us/en/trust/security/security-bulletin/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Zoom

Published Aug 8, 2023

Updated Oct 10, 2024

Reserved Jul 25, 2023

Link CVE-2023-39211

CISA Vulnrichment

Updated Oct 10, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-39211

Red Hat

No data

ENISA EUVD

Assigner Zoom

Published Aug 8, 2023

Updated Oct 10, 2024

Link EUVD-2023-42945

GitHub

No data