Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zoom

Description

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications, Inc. Zoom Desktop Client for Windows

Default version status: unaffected

  • before 5.14.5affected

References