CVE-2023-43590

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

No affected versions have been published.

Timeline

Published
Nov 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435917.8Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of priCVE-2023-43604.3Inappropriate implementation in Color in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a craftCVE-2023-436088.1A data integrity vulnerability exists in the BR_NO_CHECK_HASH_FOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specialCVE-2023-436099.1In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could obtain access to sensitive iCVE-2023-43615.3Inappropriate implementation in Autofill in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker to bypass Autofill resCVE-2023-436108.8SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting CVE-2023-436117.8The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process.  This vulCVE-2023-436127.8in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.CVE-2023-436146.1Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attaCVE-2023-436157.5Mbed TLS 2.x before 2.28.5 and 3.x before 3.5.0 has a Buffer Overflow.CVE-2023-436165.5An issue was discovered in Croc through 9.6.5. A sender can cause a receiver to overwrite files during ZIP extraction.CVE-2023-436175.3An issue was discovered in Croc through 9.6.5. When a custom shared secret is used, the sender and receiver may divulge parts of this secret
CVE-2023-43590: High severity, CVSS 7.8 | Vulnix