CVE-2020-9767

HIGH 7.8CVE-2020-9767 · Published 14/08/2020 · updated 17/06/2026

In short

CVE-2020-9767 is a HIGH (CVSS 7.8) vulnerability affecting sharing service (zoom).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sharing service zoom	`= 5.0.4`	No fix yet

Description

A vulnerability related to Dynamic-link Library (“DLL”) loading in the Zoom Sharing Service would allow an attacker who had local access to a machine on which the service was running with elevated privileges to elevate their system privileges as well through use of a malicious DLL. Zoom addressed this issue, which only applies to Windows users, in the 5.0.4 client release.

References

support.zoom.us/hc/en-us/articles/360044350792-Security-CVE-2020-9767 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free