CVE-2020-9767: Zoom Sharing Service

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release.

Affected products

• Zoom Sharing Service: version 5.0.4 only

Published 2020-08-14. Last modified 2026-06-17.