KLA12539 Multiple vulnerabilities in Zoom

🗓️ 17 May 2022 00:00:00Reported by Kaspersky LabType

Multiple vulnerabilities in Zoom. Malicious users can exploit to gain privileges, bypass security restrictions, execute arbitrary code

Reporter	Title	Published	Views	Family All 53
ATTACKERKB	CVE-2022-22786	17 May 202212:00	–	attackerkb
ATTACKERKB	CVE-2022-22787	17 May 202212:00	–	attackerkb
ATTACKERKB	CVE-2022-22785	17 May 202212:00	–	attackerkb
ATTACKERKB	CVE-2022-22784	17 May 202212:00	–	attackerkb
BDU FSTEC	The vulnerability of Zoom video conferencing software for Windows lies in the improper checking of the currently installed software version during updates. This allows a malicious individual to circumvent certain security restrictions.	6 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows allows a hacker to perform spoofing attacks due to improper data analysis of XML messages in XMPP messages.	6 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows allows a perpetrator to disclose protected information.	29 Jun 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of clients for conducting real-time audio and video conferences via Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows lies in the improper validation of the host name during the server switching process. This allows attackers to execute a “man-in-the-middle” attack.	29 Jun 202200:00	–	bdu_fstec
Circl	CVE-2022-22784	25 May 202217:27	–	circl
Circl	CVE-2022-22785	18 May 202220:28	–	circl

Source	Link
explore	www.explore.zoom.us/en/trust/security/security-bulletin/
threats	www.threats.kaspersky.com/en/class/Exploit/
threats	www.threats.kaspersky.com/en/product/Zoom-MSI/
statistics	www.statistics.securelist.com/

25 Jan 2024 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 26.8

CVSS 3.18.1 - 9.1

EPSS0.04033