CVE-2023-28596
Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to privileges to root.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - security@zoom.us
- Published
- 2023-03-27
- Last modified
- 2025-02-19
- Weaknesses
- CWE-427
Affected products
- Meetings (Zoom)
- Zoom Client For Meetings For It Admin Macos Installers (Zoom Video Communications Inc)
References
- https://explore.zoom.us/en/trust/security/security-bulletin/