CVE-2023-34116

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access...

Input validation

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network access...

Path traversal

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-36538

CVE-2023-36538 affects Zoom Rooms for Windows prior to version 5.15.0, where improper access control could allow an authenticated user to escalate privileges via local access. The underlying issue is an access-control weakness, enabling high-impact outcomes (confidentiality, integrity, and availa...

CVE-2023-36538

Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36538

Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36537

Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36537

Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-36537

CVE-2023-36537 affects Zoom Rooms for Windows prior to 5.14.5. The issue is improper privilege management that may allow an authenticated user with local access to escalate privileges. Impact per sources is high for confidentiality, integrity, and availability; attack is local with no user intera...

CVE-2023-36536

Zoom Rooms for Windows contains a vulnerability prior to version 5.15.0 where an untrusted search path in the installer could enable privilege escalation for an authenticated local user. The issue is documented across CVE-2023-36536 sources (NVD/NVD entry, CVE listing, and related summaries). Aff...

CVE-2023-36536

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34119

CVE-2023-34119 affects Zoom Rooms for Windows (prior to version 5.15.0). The root cause is an insecure temporary file in the installer, which may allow an authenticated user to escalate privileges via local access. Public documents consistently identify the product and version range, and describe...

CVE-2023-34119

Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34118

Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34118

Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access...

CVE-2023-34118

CVE-2023-34118 (Zoom Rooms for Windows) affects Zoom Rooms for Windows versions prior to 5.14.5. The issue is caused by improper privilege management, enabling an authenticated user with local access to escalate privileges. The CVSS-derived impact is high for confidentiality, integrity, and avail...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...

CVE-2023-34117

Summary: CVE-2023-34117 describes a relative path traversal in the Zoom Client SDK prior to 5.15.0, enabling an unauthorized local user to disclose information via local access. Affected software: Zoom Client SDK (pre-5.15.0). Root cause: relative path traversal in the SDK. Impact: information di...