CVE-2023-34114

HIGH

Zoom < 5.14.10 - Authenticated Information Disclosure via Network Access

Title source: llm
STIX 2.1

Description

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access.

References (1)

Core 1

Scores

CVSS v3 7.4
EPSS 0.0098
EPSS Percentile 57.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-668
Status published
Products (1)
zoom/zoom < 5.14.10 (2 CPE variants)
Published Jun 13, 2023
Tracked Since Feb 18, 2026