CVE-2023-36534: Path Traversal

Q: What is CVE-2023-36534?

CVE-2023-36534 is a vulnerability in the Zoom Desktop Client for Windows before version 5.14.7 that allows an unauthenticated user to enable an escalation of privilege via network access.

Q: How severe is CVE-2023-36534?

CVE-2023-36534 has a severity rating of critical with a CVSS score of 9.3.

Q: Which software versions are affected by CVE-2023-36534?

CVE-2023-36534 affects Zoom Desktop Client for Windows versions up to and excluding 5.14.7.

Q: How can an attacker exploit CVE-2023-36534?

An attacker can exploit CVE-2023-36534 by leveraging path traversal in the Zoom Desktop Client for Windows before version 5.14.7 to enable an escalation of privilege via network access.

Q: Is there a fix for CVE-2023-36534?

Yes, updating Zoom Desktop Client for Windows to version 5.14.7 or later will fix CVE-2023-36534.

Published Aug 8, 2023

Updated

Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.

Affected Software

1 affected component

Zoom Zoom Windows<5.14.7

Event History

Aug 8, 2023

CVE Published

via MITRE·05:35 PM

Data Sourced

via MITRE·05:35 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-36534?

CVE-2023-36534 is a vulnerability in the Zoom Desktop Client for Windows before version 5.14.7 that allows an unauthenticated user to enable an escalation of privilege via network access.

How severe is CVE-2023-36534?

CVE-2023-36534 has a severity rating of critical with a CVSS score of 9.3.

Which software versions are affected by CVE-2023-36534?

CVE-2023-36534 affects Zoom Desktop Client for Windows versions up to and excluding 5.14.7.

How can an attacker exploit CVE-2023-36534?

An attacker can exploit CVE-2023-36534 by leveraging path traversal in the Zoom Desktop Client for Windows before version 5.14.7 to enable an escalation of privilege via network access.

Is there a fix for CVE-2023-36534?