CVE-2023-28600: Zoom

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client.

Affected products

• Zoom Zoom: before 5.14.0 (fixed in 5.14.0)

Published 2023-06-13. Last modified 2026-06-17.