CVE-2023-39199
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-39199 is a newly disclosed vulnerability affecting In-Meeting Chat in certain Zoom clients. This issue involves cryptographic flaws that can enable privileged users to perform information disclosures through network access. By exploiting these vulnerabilities, attackers may gain unauthorized access to sensitive data, potentially leading to privacy breaches or further cyberattacks. The exact nature of the cryptographic issues remains undisclosed, but users are advised to apply the latest patches and updates from Zoom to mitigate this risk. It's important to note that this vulnerability only affects specific Zoom clients and requires a privileged user to be present in the meeting.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.