跳转到帖子

Zoom: CVE-2023-22880: Information Disclosure in Zoom for Windows Clients

recommended_posts

发布于
  • Members

Zoom: CVE-2023-22880: Information Disclosure in Zoom for Windows Clients

Severity
7
CVSS
(AV:N/AC:L/Au:S/C:C/I:N/A:N)
Published
03/14/2023
Created
01/09/2025
Added
01/08/2025
Modified
01/08/2025

Description

Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft's online Spellcheck service instead of the local Windows Spellcheck.

Solution(s)

  • zoom-zoom-upgrade-latest

References

  • https://attackerkb.com/topics/cve-2023-22880
  • CVE - 2023-22880
  • https://explore.zoom.us/en/trust/security/security-bulletin
  • 查看数 697
  • 已创建
  • 最后回复