CVE-2023-36534: critical vulnerability in Zoom Desktop Client for Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The Zoom Desktop Client for Windows has a flaw that allows someone on the network to bypass security protections and gain higher privileges on your computer without needing a password. This could let attackers take control of your system.
Path traversal vulnerability in Zoom Desktop Client for Windows prior to version 5.14.7 permits unauthenticated remote attackers to manipulate file paths via network access, enabling privilege escalation. The vulnerability requires network-level access but no prior authentication, resulting in potential arbitrary code execution or system compromise.
In the same product, most dangerous first.