CVE-2023-39199
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-39199 is a newly disclosed vulnerability affecting In-Meeting Chat in certain Zoom clients. This issue involves cryptographic flaws that can enable privileged users to perform information disclosures through network access. By exploiting these vulnerabilities, attackers may gain unauthorized access to sensitive data, potentially leading to privacy breaches or further cyberattacks. The exact nature of the cryptographic issues remains undisclosed, but users are advised to apply the latest patches and updates from Zoom to mitigate this risk. It's important to note that this vulnerability only affects specific Zoom clients and requires a privileged user to be present in the meeting.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions