Approved changes feed: RSS · Atom

cpe:2.3:a:zoom:zoom:*:*:*:*:*:linux_kernel:*:*

part: a version: * update: *

VendorZoom (f27b522e-dea8-5818-ba42-864516f1d399)
ProductZoom (65336b43-33f0-59ce-95e1-d1d9193f3816)
Edition*
Language*
Software edition*
Target softwarelinux_kernel
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28597 vulnerable 2026-06-03 14:51:13.089315 Improper trust boundary implementation for SMB in Zoom Clients
HIGH (8.3)
Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later opens it using a link from Zoom’s web portal, an attacker positioned on an adjacent network to the victim client could set up a malicious SMB server to respond to client requests, causing the client to execute attacker controlled executables. This could result in an attacker gaining access to a user's device and data, and remote code execution.
Published: 2023-03-27T00:00:00.000Z
Updated: 2025-02-19T15:27:48.810Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.