CVE-2022-28768
The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - security@zoom.us
- Published
- 2022-11-17
- Last modified
- 2025-04-29
- Weaknesses
- CWE-362, CWE-689
Affected products
- Meetings (Zoom)
- Zoom Client For Meetings Installer For Macos Standard And For It Admin (Zoom Video Communications Inc)
References
- https://explore.zoom.us/en/trust/security/security-bulletin/
