HIGH🇵🇱 Wersja polska

CVE-2023-49647

CVSS 8.8v3.1pub. 2024-01-12upd. 2024-11-21

Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenticated user to conduct an escalation of privilege via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

  • Microsoft Windows

    OS
    Microsoft
    wszystkie wersje

  • Zoom Meeting Software Development Kit

    APP
    Zoom
    < 5.16.10

  • Zoom Video Software Development Kit

    APP
    Zoom
    < 5.16.10

  • Zoom Virtual Desktop Infrastructure

    APP
    Zoom
    < 5.14.145.15.0 – 5.15.12 (bez)5.16.0 – 5.16.10 (bez)

  • Zoom

    APP
    Zoom
    < 5.16.10
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2026-8398CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Atak na łańcuch dostaw DAEMON Tools Lite — trojanizacja instalatorów

CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓ten sam produkt

Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty

CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP

CVE-2024-7262CRITICAL9.3⚠ KEVPL ✓ten sam produkt

Path Traversal w Kingsoft WPS Office — ładowanie dowolnej biblioteki Windows

CVE-2024-4577CRITICAL9.8⚠ KEVPL ✓ten sam produkt

PHP CGI argument injection – RCE na Windows przez mechanizm Best-Fit