CVE-2023-39203mediumCWE-789

CVE-2023-39203: medium-severity vulnerability in Zoom Rooms Client for Windows and Zoom VDI…

Published · Updated

Follow this CVE+ Monitor Zoom Rooms Client for Windows and Zoom VDI Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.9%
In short

Zoom Team Chat on Windows can be made to consume excessive resources by an unauthenticated attacker over the network, potentially leading to information disclosure. This could allow someone to crash the application or extract sensitive data without logging in.

Technical detail

An unauthenticated attacker can send crafted network packets to the Zoom Team Chat service (CWE-789: uncontrolled resource consumption) on Windows and VDI clients, causing resource exhaustion. This resource depletion may enable information disclosure through side-channel effects or denial of service conditions.

Summary generated and translated by AI from the official description.
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Zoom Video Communications, Inc. · Zoom Rooms Client for Windows and Zoom VDI Client
Related CVEs — Zoom Rooms Client for Windows and Zoom VDI…

In the same product, most dangerous first.

CVE-2023-39202LOWCVE-2023-39202EPSS 0.2%