CVE-2023-43586CWE-426

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an…

High · published December 13, 2023

CVSS v3.1
7.3
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00991 · 62.2th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2023-12-13T22:17Z
EPSS history
Timeline
  • 13 DEC 22:17Z
    Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an…
    cvelistv5