{"id":"CVE-2023-39213","aliases":["EUVD-2023-42947","GHSA-6rv3-82jq-3r4c"],"status":"published","title":"Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI...","description":"Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.","severity":{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01447,"percentile":0.73658,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-176","CWE-74"],"published":"2023-08-08T21:36:13Z","modified":"2026-06-17T06:11:46Z","products":[{"vendor":"zoom","product":"virtual_desktop_infrastructure"},{"vendor":"zoom","product":"zoom"},{"vendor":"zoom video communications, inc.","product":"zoom desktop client for windows and zoom vdi client"}],"references":[{"url":"https://explore.zoom.us/en/trust/security/security-bulletin/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39213"},{"url":"https://explore.zoom.us/en/trust/security/security-bulletin"},{"url":"https://github.com/advisories/GHSA-6rv3-82jq-3r4c"}],"sources":{"cve":[{"id":"CVE-2023-39213","description":"Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.","status":"published","published":"2023-08-08T21:36:13.783Z","modified":"2024-10-10T16:19:52.228Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-176"],"updated_at":"2026-11-02T14:35:33.138994Z"}],"euvd":[{"id":"EUVD-2023-42947","description":"Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.","status":"published","published":"2023-08-08T21:36:13Z","modified":"2024-10-10T16:19:52Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:27:41.012246Z"}],"ghsa":[{"id":"GHSA-6rv3-82jq-3r4c","title":"\nImproper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI...","description":"\nImproper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.\n\n","status":"published","published":"2023-08-09T00:31:56Z","modified":"2024-09-27T21:32:51Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-74","CWE-176"],"updated_at":"2026-11-02T14:58:21.889894Z"}],"nvd":[{"id":"CVE-2023-39213","description":"Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.","status":"published","published":"2023-08-08T22:15:10.657Z","modified":"2026-06-17T06:11:46.8Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-176","CWE-74"],"updated_at":"2026-11-02T14:08:22.812138Z"}]}}