cve/2023/CVE-2023-36540.md

### [CVE-2023-36540](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36540)
![](https://img.shields.io/static/v1?label=Product&message=Zoom%20Desktop%20Client%20for%20Windows&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20before%205.14.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-426%3A%20Untrusted%20Search%20Path&color=brighgreen)

### Description

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds