CVE-2023-22883 : faille élevée Zoom Video Communications Inc Zoom… (CVSS 7.2)

Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user.

Sévérité

Élevée (CVSS 7.2)

Vecteur CVSS

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

16 mars 2023

Dernière mise à jour

26 févr. 2025

• Zoom Video Communications Inc Zoom Client for Meetings for IT Admin Windows installers

• Fiche CVE-2023-22883 sur le NVD (NIST)
• explore.zoom.us/en/trust/security/security-bulletin/