Local privilege escalation in Windows Zoom Clients
CVE-2022-22782

7.9HIGH

Key Information:

Vendor

Zoom
Status
Zoom Client For Meetings For Windows
Zoom Rooms For Conference Room For Windows
Zoom Plugins For Microsoft Outlook For Windows
Zoom Vdi Windows Meeting Clients
Vendor
CVE Published:
28 April 2022

What is CVE-2022-22782?

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Zoom Client for Meetings for Windows < 5.9.7

Zoom Plugins for Microsoft Outlook for Windows < 5.10.3

Zoom Rooms for Conference Room for Windows < 5.10.0

References

https://explore.zoom.us/en/trust/security/security-bulletin/
x_refsource_MISC

CVSS V3.1

Score:
7.9
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Zero Day Initiative
JSON
.