CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.

Scoring

Severity

LOW

CVSS base score

3.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

EPSS probability

0.27%

CWE

CWE-449

Published

2023-11-14

Last modified

2026-03-13

Affected products

• Zoom Video Communications, Inc. Zoom Clients

Weakness type

• CWE-449

Related vulnerabilities

• CVE-2025-49736 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
• CVE-2025-26643 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2025-21404 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-49041 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-43577 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-38083 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-24698 — Zoom Clients - Improper Authentication
• CVE-2023-43585 — Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may...

Markdown version · Browse all CVEs