cve/2023/CVE-2023-28596.md

### [CVE-2023-28596](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28596)
![](https://img.shields.io/static/v1?label=Product&message=Zoom%20Client%20for%20Meetings%20for%20IT%20Admin%20macOS%20installers&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3C%205.13.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-427%3A%20Uncontrolled%20Search%20Path%20Element&color=brighgreen)

### Description

Zoom Client for IT Admin macOS installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to privileges to root.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/kohnakagawa/kohnakagawa