CVE-2023-36540

7.3

HIGHCVSS v3

Published

August 8, 2023

Affected

4 projects

Assigned by

[email protected]

Severity scale

010

Description

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

zoom

NPMLike hapijs boom but for non-error return data

< 5.14.5NVD

zoom

Crates.ioA particle physics library with extensive generics

< 5.14.5NVD

zoom

RubyGems

More on this CVE

NVD↗GitHub Advisory↗

Ruby/ZOOM provides a Ruby binding to the Z39.50 Object-Orientation Model (ZOOM), an abstract object-oriented programming interface to a subset of the services specified by the Z39.50 standard, also known as the international standard ISO 23950. This version introduces ZOOM Extended Services.

< 5.14.5NVD

zoom

Python Package IndexDistributed project management

< 5.14.5NVD

Security Advisories

CVE-2023-36540

Description

More on this CVE