CVE-2022-28752

Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability. A local low-privileged malicious user could exploit this vulnerability to escalate their privileges to the SYSTEM user.

Score

CVSS 3.1 8.8 High

Status

Modified - security@zoom.us

Published

2022-08-17

Last modified

2024-09-17

Weaknesses

CWE-347

Affected products

• Rooms (Zoom)
• Zoom Room For Conference Room For Windows (Zoom Video Communications Inc)

References

• https://explore.zoom.us/en/trust/security/security-bulletin/