CVE-2023-36540CWE-426

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege…

High · published August 8, 2023

CVSS v3.1
7.3
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.7th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2023-08-08T17:05Z
EPSS history
Timeline
  • 08 AUG 17:05Z
    Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege…
    cvelistv5