CVE-2023-34114 Information disclosure in Zoom for MacOS Client

What is CVE-2023-34114?

CVE-2023-34114 is a high-severity vulnerability in Zoom Zoom, published on 13 Jun 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access.

Weakness: CWE-668

Which versions are affected by CVE-2023-34114?

It affects 1 product.

Products include Zoom Zoom.

How do I fix CVE-2023-34114?

No fix has been published for CVE-2023-34114 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-34114 being exploited?

There is no known exploitation of CVE-2023-34114 in the wild and no public exploit code.

Other vulnerabilities in Zoom Zoom

• CVE-2018-15715 Missing authorization in Zoom Critical 9.8
• CVE-2023-39216 Cross-site scripting in Zoom Desktop Client for Windows Critical 9.6
• CVE-2023-36534 Path traversal in Zoom Desktop Client for Windows Critical 9.3
• CVE-2019-13567 Command injection in n/a High 8.8
• CVE-2017-15048 Memory corruption in n/a High 8.8

All Zoom Zoom vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-385w-hjpp-r4cx.