Skip to content
CVE PROGRAM SOURCE RECORD3.3 Low

CVE-2022-28766

DLL injection in Zoom Windows Clients

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Zoom

Description

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zoom Video Communications Inc Zoom Client for Meetings for Windows (32-bit)

  • unspecified to < 5.12.6affected

Zoom Video Communications Inc Zoom VDI Windows Meeting Client for Windows (32-bit)

  • unspecified to < 5.12.6affected

Zoom Video Communications Inc Zoom Rooms for Conference Room for Windows (32-bit)

  • unspecified to < 5.12.6affected

References