CVE-2023-49647CWE-266

Zoom Desktop Client for Windows - Improper Access Control

High · published January 12, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2024-01-12T21:44Z
EPSS history
Timeline
  • 12 JAN 21:44Z
    Zoom Desktop Client for Windows - Improper Access Control
    cvelistv5