CVE-2023-36540 — Zoom Video Communications, Inc. / Zoom Desktop Client for Windows

CVE-2023-36540

Zoom Video Communications, Inc. / Zoom Desktop Client for Windows PUBLISHED

Description (CNA)

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

Affected (CNA)

Vendor / product	Versions
Zoom Video Communications, Inc. / Zoom Desktop Client for Windows	affected before 5.14.5

CWE

CWE-426

References

https://explore.zoom.us/en/trust/security/security-bulletin/

ADP enrichment

CVE

No English description supplied.

https://explore.zoom.us/en/trust/security/security-bulletin/

CISA-ADP

No English description supplied.

No references supplied.