CVE-2023-34120

7.8 highEPSS 0.1%

High (7.8) in zoom virtual desktop infrastructure. EPSS 0.1% chance of exploitation in the next 30 days.

Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-347
Published: 2023-06-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoom:virtual_desktop_infrastructure

References

https://explore.zoom.us/en/trust/security/security-bulletin/
https://explore.zoom.us/en/trust/security/security-bulletin/

Check your stack JSON