CVE-2023-28602
First published: Tue Jun 13 2023(Updated: )
Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade Zoom Client components to previous versions.
Credit: security@zoom.us
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zoom Zoom | <5.13.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability in Zoom for Windows clients prior to 5.13.5?
The vulnerability is an improper verification of cryptographic signature vulnerability.
How can a malicious user exploit this vulnerability?
A malicious user may potentially downgrade Zoom Client components to previous versions.
What is the severity of CVE-2023-28602?
The severity of CVE-2023-28602 is high with a CVSS score of 7.7.
How can I fix the vulnerability in Zoom for Windows clients?
To fix the vulnerability, update Zoom for Windows clients to version 5.13.5 or newer.
Where can I find more information about CVE-2023-28602?
You can find more information about CVE-2023-28602 in the Zoom security bulletin.
- collector/nvd-index
- vendor/zoom
- canonical/zoom zoom