Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_video_communications_inc:zoom_rooms_(for_android,_ios,_linux,_macos,_and_windows):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Video Communications Inc (35e29925-d897-5a03-b7c4-27ce30ad5789)
ProductZoom Rooms (For Android, Ios, Linux, Macos, And Windows) (1f84e14d-1d19-566c-a803-b3d666bf4c7e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28597 vulnerable 2026-06-03 14:51:13.080422 Improper trust boundary implementation for SMB in Zoom Clients
HIGH (8.3)
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-02-19T15:27:48.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.