CVE-2023-39214High· 7.6▾ TwilightExposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.8 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
1.0%
Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access.
zoom_sdk_s before 5.15.5Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116779Critical· 9.8FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
CVE-2026-121145High· 7.1Insecure Configuration Vulnerability in Tata Motors iRA and iRA.ev mobile application
CVE-2026-92704High· 8.3SharpEmu: Cross-site request forgery in the debugger frontend leads to arbitrary process execution
CVE-2026-120091High· 8.7Temporal Server Kubernetes compute provider builds a client from caller-supplied configuration and runs a caller-chosen command on the Worker Service host
CVE-2026-119978High· 8.5Flowise through 3.1.4 Custom Function Sandbox Escape RCE via LocalFileStore
CVE-2026-66088Critical· 9.4Unrestricted Command Execution via system.execute