High severity8.8NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-39211

Description

Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via local access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Rooms2 versions
cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*+ 1 more
- cpe:2.3:a:zoom:rooms:*:*:*:*:*:windows:*:*range: <5.15.5
- (no CPE)range: <5.15.5
Zoom Video Communications, Inc./Zoom
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
Range: <5.15.5
Zoom Video Communications, Inc./Desktop Clientllm-create
Range: <5.15.5
Zoom Video Communications, Inc./Zoom Desktop Client for Windowscpe-rescue
Range: before 5.15.5

Patches

Vulnerability mechanics

References

explore.zoom.us/en/trust/security/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000