CVE-2022-28751

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the package signature validation during the update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Score

CVSS 3.1 8.8 High

Status

Modified - security@zoom.us

Published

2022-08-17

Last modified

2024-09-16

Weaknesses

CWE-347

Affected products

• Meetings (Zoom)
• Zoom Client For Meetings For Macos (Zoom Video Communications Inc)

References

• https://explore.zoom.us/en/trust/security/security-bulletin/