Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_video_communications_inc:zoom_(for_android,_ios,_linux,_macos,_and_windows):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Video Communications Inc (35e29925-d897-5a03-b7c4-27ce30ad5789)
ProductZoom (For Android, Ios, Linux, Macos, And Windows) (04cdf55f-255b-5e6c-9a32-86292aa26dc8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28597 vulnerable 2026-06-03 14:51:13.078767 Improper trust boundary implementation for SMB in Zoom Clients
HIGH (8.3)
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-02-19T15:27:48.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.