CVE-2023-39199

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 14, 2023
Updated: Nov 21, 2023
CWE ID 310

Summary

CVE-2023-39199 is a newly disclosed vulnerability affecting In-Meeting Chat in certain Zoom clients. This issue involves cryptographic flaws that can enable privileged users to perform information disclosures through network access. By exploiting these vulnerabilities, attackers may gain unauthorized access to sensitive data, potentially leading to privacy breaches or further cyberattacks. The exact nature of the cryptographic issues remains undisclosed, but users are advised to apply the latest patches and updates from Zoom to mitigate this risk. It's important to note that this vulnerability only affects specific Zoom clients and requires a privileged user to be present in the meeting.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share