CVE-2023-43588

Published: Nov 15, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

Products: Zoom: Meetings, Virtual Desktop Infrastructure, Zoom

3 products

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Zoom Meetings	Before 5.16.0
Zoom Meetings	Before 5.16.0
Zoom Meetings	Before 5.16.0
Zoom Virtual Desktop Infrastructure	Before 5.14.13
Zoom Virtual Desktop Infrastructure	From 5.15.0 to 5.15.11
Zoom Zoom	Before 5.16.0
Zoom Zoom	Before 5.16.0
Zoom Zoom	Before 5.16.0

Source: security@zoom.us

Vendor Advisory

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

No history available yet.