{"id":"CVE-2023-43586","aliases":["EUVD-2023-47992","GHSA-m4mq-h54p-47ph"],"status":"published","title":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for...","description":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00991,"percentile":0.62798,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22","CWE-426"],"published":"2023-12-13T22:17:48Z","modified":"2026-06-17T06:26:02Z","products":[{"vendor":"zoom","product":"meeting_software_development_kit"},{"vendor":"zoom","product":"video_software_development_kit"},{"vendor":"zoom","product":"virtual_desktop_infrastructure"},{"vendor":"zoom","product":"zoom"},{"vendor":"zoom video communications, inc.","product":"zoom desktop client for windows, zoom vdi client for windows and zoom sdks for windows"}],"references":[{"url":"https://www.zoom.com/en/trust/security-bulletin/ZSB-23059/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43586"},{"url":"https://github.com/advisories/GHSA-m4mq-h54p-47ph"}],"sources":{"cve":[{"id":"CVE-2023-43586","description":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.","status":"published","published":"2023-12-13T22:17:48.264Z","modified":"2026-02-25T16:34:33.938Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-426"],"updated_at":"2026-11-02T14:35:15.066338Z"}],"euvd":[{"id":"EUVD-2023-47992","description":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.","status":"published","published":"2023-12-13T22:17:48Z","modified":"2026-02-25T16:34:33Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T19:48:29.128374Z"}],"ghsa":[{"id":"GHSA-m4mq-h54p-47ph","title":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for...","description":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.","status":"published","published":"2023-12-14T00:30:26Z","modified":"2023-12-18T21:30:23Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-22","CWE-426"],"updated_at":"2026-11-02T14:55:14.600975Z"}],"nvd":[{"id":"CVE-2023-43586","description":"Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.","status":"published","published":"2023-12-13T23:15:07.66Z","modified":"2026-06-17T06:26:02.92Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-426","CWE-22"],"updated_at":"2026-11-02T14:08:54.696438Z"}]}}