CVE-2023-22883

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user.

Score

CVSS 3.1 7.8 High

Status

Modified - security@zoom.us

Published

2023-03-16

Last modified

2025-02-26

Weaknesses

CWE-367

Affected products

• Meetings (Zoom)
• Zoom Client For Meetings For It Admin Windows Installers (Zoom Video Communications Inc)

References

• https://explore.zoom.us/en/trust/security/security-bulletin/