CVE-2023-28601

Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability. A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client.

Score

CVSS 3.1 8.3 High

Status

Modified - security@zoom.us

Published

2023-06-13

Last modified

2025-01-02

Weaknesses

CWE-119, CWE-358

Affected products

• Zoom (Zoom)
• Zoom For Windows Client (Zoom Video Communications Inc.)

References

• https://explore.zoom.us/en/trust/security/security-bulletin/