Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-22782

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.

Published

2022-04-28T15:15:09.847

Last Modified

2024-11-21T06:47:26.380

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.9 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

9.2

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application zoom meetings < 5.9.7 Yes
Application zoom rooms_for_conference_rooms < 5.10.0 Yes
Application zoom vdi_windows_meeting_clients < 5.9.6 Yes
Application zoom zoom_plugin_for_microsoft_outlook < 5.10.3 Yes
References