cvedb.io
CVE-2023-34120
HIGH · CVSS 8.7
EPSS exploitation probability: 0%
Published 2023-06-13T18:15:21.913 · Last modified 2026-06-17T06:02:56.303

Summary

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.

Affected products

zoom — virtual_desktop_infrastructure

Does this affect you?

Add your gear to cvedb and we'll alert you only when zoom ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.