{"id":"CVE-2023-34114","aliases":["EUVD-2023-38216","GHSA-385w-hjpp-r4cx"],"status":"published","title":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14...","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access.","severity":{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00983,"percentile":0.62591,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-668"],"published":"2023-06-13T18:37:22Z","modified":"2026-06-17T06:02:55Z","products":[{"vendor":"zoom","product":"zoom"},{"vendor":"zoom video communications, inc.","product":"zoom for macos client"},{"vendor":"zoom video communications, inc.","product":"zoom for windows client"}],"references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34114"},{"url":"https://explore.zoom.us/en/trust/security/security-bulletin"},{"url":"https://github.com/advisories/GHSA-385w-hjpp-r4cx"}],"sources":{"cve":[{"id":"CVE-2023-34114","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. ","status":"published","published":"2023-06-13T18:37:22.969Z","modified":"2025-01-02T19:57:07.764Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-38216","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. ","status":"published","published":"2023-06-13T18:37:22Z","modified":"2025-01-02T19:57:07Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-03T00:04:27.4378Z"}],"ghsa":[{"id":"GHSA-385w-hjpp-r4cx","title":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14...","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. ","status":"published","published":"2023-06-13T21:30:18Z","modified":"2024-04-04T04:47:54Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:56:27.331112Z"}],"nvd":[{"id":"CVE-2023-34114","description":"Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. ","status":"published","published":"2023-06-13T19:15:09.427Z","modified":"2026-06-17T06:02:55.51Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-668"],"updated_at":"2026-11-02T14:08:06.335469Z"}]}}