CVE-2023-43582 MEDIUM

CVE-2023-43582

Vendor Zoom Video Communications, Inc.
Product Zoom Clients
Weakness CWE-939
Published November 14, 2023
Last update September 19, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.

Key dates

02Disclosure timeline

November 14, 2023 CVE published
September 19, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-3471 Opening a window with {{javascript:alert()}} as URL causes crash in the Mattermost Desktop App CVE-2026-33335 Vikunja Desktop allows arbitrary local application invocation via unvalidated shell.openExternal CVE-2026-35394 Mobile Next has Arbitrary Android Intent Execution via mobile_open_url CVE-2026-26123 Microsoft Authenticator Information Disclosure Vulnerability CVE-2026-12065 Groww Stock, Mutual Fund, Gold App WebView URL improper authorization in handler for custom url scheme