Improper Privilege Management in Zoom Rooms Client for Windows and Zoom Workplace Desktop App for Windows - CVE-2023-39211
Published: August 8, 2023
Vulnerability identifier: #VU79129
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-39211
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to escalate privileges.
The vulnerability exists due to improper privilege management. A local user can escalate privileges on the system.
Affected software
Zoom Rooms Client for Windows
Zoom Workplace Desktop App for Windows
Zoom Workplace Desktop App for Windows
How to mitigate CVE-2023-39211
Install updates from vendor's website.
Zoom Rooms Client for Windows - update to 5.15.5 3049
Zoom Workplace Desktop App for Windows - update to 5.15.5 19404
Zoom Workplace Desktop App for Windows - update to 5.15.5 19404