{"id":"CVE-2023-34121","aliases":["EUVD-2023-38223","GHSA-3r5h-mjx6-6cjh"],"status":"published","title":"Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting ...","description":"Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.","severity":{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00952,"percentile":0.61623,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-79"],"published":"2023-06-13T17:42:17Z","modified":"2026-06-17T06:02:56Z","products":[{"vendor":"zoom","product":"rooms"},{"vendor":"zoom","product":"virtual_desktop_infrastructure"},{"vendor":"zoom","product":"zoom"},{"vendor":"zoom video communications inc","product":"zoom for windows"},{"vendor":"zoom video communications, inc.","product":"zoom for windows"},{"vendor":"zoom video communications, inc.","product":"zoom rooms client for windows"},{"vendor":"zoomzoom video communications, inc.","product":"zoom vdi for windows meeting clients"}],"references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34121"},{"url":"https://explore.zoom.us/en/trust/security/security-bulletin"},{"url":"https://github.com/advisories/GHSA-3r5h-mjx6-6cjh"}],"sources":{"cve":[{"id":"CVE-2023-34121","description":"Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.","status":"published","published":"2023-06-13T17:42:17.823Z","modified":"2025-01-02T20:00:09.588Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:35:35.580545Z"}],"euvd":[{"id":"EUVD-2023-38223","description":"Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.","status":"published","published":"2023-06-13T17:42:17Z","modified":"2025-01-02T20:00:09Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:27.4378Z"}],"ghsa":[{"id":"GHSA-3r5h-mjx6-6cjh","title":" Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting ...","description":" Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.","status":"published","published":"2023-06-13T18:30:40Z","modified":"2024-09-19T21:33:27Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-20","CWE-79"],"updated_at":"2026-11-02T14:58:18.610136Z"}],"nvd":[{"id":"CVE-2023-34121","description":"Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.","status":"published","published":"2023-06-13T18:15:21.987Z","modified":"2026-06-17T06:02:56.437Z","cvss":[{"version":"3.1","score":4.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:08:06.335469Z"}]}}