CVE-2023-28598: Zoom

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Zoom for Linux clients prior to 5.13.10 contain an HTML injection vulnerability. If a victim starts a chat with a malicious user it could result in a Zoom application crash.

Affected products

• Zoom Zoom: before 5.13.10 (fixed in 5.13.10)

Published 2023-06-13. Last modified 2026-06-17.