CVE-2023-34120

State: Published
Severity: 8.7 High
Published: Jun 13, 2023
Updated: Jan 2, 2025
Reserved: May 25, 2023

Description

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.

Scores

CVSS	Score	Vector	Source
3.1	8.7 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L	Zoom

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
Zoom for Windows ClientZoom Video Communications, Inc.	before 5.14.0Affected
Zoom Rooms Client for WindowsZoom Video Communications, Inc.	before 5.14.0Affected
Zoom VDI for Windows Meeting ClientsZoom Video Communications, Inc.	before 5.14.0Affected

References

https://explore.zoom.us/en/trust/security/security-bulletin/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.