← Back

CVE-2023-39205

nvd nist
Published: Nov 14, 2023Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access.

Affected (17)

Zoom
4 products
Meetings
Video Software Development Kit
Virtual Desktop Infrastructure
Zoom
Configuration A
17 vulnerable
Vulnerable SoftwareAffected Versions
Zoom
Meetings
version < 5.16.0
Meetings
version < 5.16.0
Meetings
version < 5.16.0
Meetings
version < 5.16.0
Meetings
version < 5.16.0
Zoom
Video Software Development Kit
version < 1.9.0
Video Software Development Kit
version < 1.9.0
Video Software Development Kit
version < 1.9.0
Video Software Development Kit
version < 1.9.0
Video Software Development Kit
version < 1.9.0
Zoom
Virtual Desktop Infrastructure
version < 5.14.13
Virtual Desktop Infrastructure
5.15.0 ≤ version < 5.15.11
Zoom
Zoom
version < 5.16.0
Zoom
version < 5.16.0
Zoom
version < 5.16.0
Zoom
version < 5.16.0
Zoom
version < 5.16.0

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (2)

Source: security@zoom.us
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.