Cyber Resilience

CVE-2023-36536

HighLPE

Published: 11 July 2023

Published
11 July 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS Score 0.0006 20.1th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-36536 is a high-severity Untrusted Search Path (CWE-426) vulnerability in Zoom Rooms. Its CVSS base score is 8.2 (High).

Operationally, ranked at the 20.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.

CWE(s)
CWE-426

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

zoom
rooms
≤ 5.15.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References