CVE-2023-34120

HIGH

8.7

Description

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.

CVE Details

CVSS v3.1 Score8.7

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published6/13/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:windowszoom:virtual_desktop_infrastructure

Weaknesses (CWE)

CWE-347

References

https://explore.zoom.us/en/trust/security/security-bulletin/(security@zoom.us)

https://explore.zoom.us/en/trust/security/security-bulletin/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.