CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-39202
https://notcve.org/view.php?id=CVE-2023-39202
Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access. Una ruta de búsqueda no confiable en Zoom Rooms Client para Windows y Zoom VDI Client puede permitir que un usuario privilegiado realice una denegación de servicio a través del acceso local. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-426: Untrusted Search Path •
CVSS: 7.1EPSS: 0%CPEs: 8EXPL: 0CVE-2023-39215
https://notcve.org/view.php?id=CVE-2023-39215
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. Una autenticación inadecuada en los clientes de Zoom puede permitir que un usuario autenticado realice una denegación de servicio a través del acceso a la red. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-287: Improper Authentication CWE-449: The UI Performs the Wrong Action •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-39213
https://notcve.org/view.php?id=CVE-2023-39213
Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access. • https://explore.zoom.us/en/trust/security/security-bulletin • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') CWE-176: Improper Handling of Unicode Encoding •