CVE-2023-43585

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.

Scoring

Severity

HIGH

CVSS base score

7.1

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

EPSS probability

0.13%

CWE

CWE-449

Published

2023-12-13

Last modified

2026-03-13

Affected products

• Zoom Video Communications, Inc. Zoom Mobile App for iOS and SDKs for iOS

Weakness type

• CWE-449

Related vulnerabilities

• CVE-2025-49736 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
• CVE-2025-26643 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2025-21404 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-49041 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-43577 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-38083 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-24698 — Zoom Clients - Improper Authentication
• CVE-2023-43588 — Insufficient control flow management in some Zoom clients may allow an authenticated user to...

Markdown version · Browse all CVEs