Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2022-28756

Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zoom

Description

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc Zoom Client for Meetings for MacOS

  • next of 5.7.3 to < unspecifiedaffected
  • unspecified to < 5.11.5affected

References