CVE-2023-43586
- State
- Published
- Severity
- 7.3 High
- Published
- Dec 13, 2023
- Updated
- Feb 25, 2026
- Reserved
- Sep 19, 2023
Description
Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.3 High | CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N | Zoom |
Weaknesses
- CWE-426 Untrusted Search Path
Affected Products
| Product | Versions |
|---|---|
Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for WindowsZoom Video Communications, Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.