Critical severity9.6NVD Advisory· Published Aug 8, 2023· Updated Jun 17, 2026

CVE-2023-39213

Description

Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an escalation of privilege via network access.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zoom Video Communications, Inc./Virtual Desktop Infrastructure
cpe:2.3:a:zoom:virtual_desktop_infrastructure:*:*:*:*:*:*:*:*
Range: <5.15.2
Zoom Video Communications, Inc./Zoom
cpe:2.3:a:zoom:zoom:*:*:*:*:*:windows:*:*
Range: <5.15.2
Zoom Video Communications, Inc./Desktop Clientllm-create
Range: <5.15.2
Zoom Video Communications, Inc./Zoom VDI Clientllm-create
Range: <5.15.2
Zoom Video Communications, Inc./Zoom Desktop Client for Windowscpe-rescue
Range: before 5.15.2

Patches

Vulnerability mechanics

References

explore.zoom.us/en/trust/security/security-bulletin/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000