CVE-2022-28751

The CVE-2022-28751 issue affects Zoom Client for Meetings on macOS (Standard and IT Admin) prior to 5.11.3. It stems from flawed package signature validation during the update process, permitting a local low-privileged user to escalate to root. Public-available sources (NVD/Nessus entries) confir...

CVE-2022-28751 Local Privilege Escalation in Zoom Client for Meetings for MacOS

The Zoom Client for Meetings for MacOS Standard and for IT Admin before version 5.11.3 contains a vulnerability in the package signature validation during the update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

Zoom Exploit on MacOS

This vulnerability was reported to Zoom last December: The exploit works by targeting the installer for the Zoom application, which needs to run with special user permissions in order to install or remove the main Zoom application from a computer. Though the installer requires a user to enter the...

CVE-2022-28757

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional videoconferencing systems. A security vulnerability exists in Zoom Rooms for Conference Rooms for Windows prior to version 5.11.0, which originated fr...

PT-2022-4376 · Zoom · Zoom Rooms For Conference Room For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 Zoom Client for Meetings for macOS affected versions not specified Description: The issue is related to a Local Privilege Escalation vulnerability that could be exploited by a...

PT-2022-4375 · Zoom · Zoom Client For Meetings

Name of the Vulnerable Software and Affected Versions: Zoom Client for Meetings versions prior to 5.11.3 Description: The issue is related to incorrect cryptographic signature validation in the update process of the Zoom Client for Meetings for macOS. This could allow a local low-privileged user ...

Zoom Client 数据伪造问题漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A data forgery issue vulnerability exists in Zoom Client for Meetings for MacOS Standard and for IT Admin versions prior to 5.11.3, which stems from the inclusion of a package signature...

Zoom Client < 5.11.3 Privilege Escalation Vulnerability (ZSB-22017) - Mac OS X

The Zoom Client is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:zoom:zoom";...

Zoom Client 5.7.3 < 5.11.5 Privilege Escalation Vulnerability (ZSB-22018) - Mac OS X

The Zoom Client is prone to a privilege escalation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Zoom Client < 5.11.0 Improper Input Validation Vulnerability (ZSB-22016) - Linux

The Zoom Client is prone to an improper input validation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Zoom Client < 5.11.0 Improper Input Validation Vulnerability (ZSB-22016) - Windows

The Zoom Client is prone to an improper input validation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Zoom Client < 5.11.0 Improper Input Validation Vulnerability (ZSB-22016) - Mac OS X

The Zoom Client is prone to an improper input validation vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

The vulnerability of the automatic update function for conducting audio and video conferences in real-time with Zoom Client for Meetings for macOS allows a malicious individual to elevate their privileges to root level.

The vulnerability of the automatic update function for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to elevate their privileges to the...

Zoom Client 5.7.3 < 5.11.5 Privilege Escalation

The version of the Zoom Client installed on the remote host is between 5.7.3 and 5.11.5. It is, therefore, affected by a privilege escalation vulnerability in the auto-update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root. Note that Ness...

CVE-2022-28756

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

CVE-2022-28756

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

Input validation

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...

CVE-2022-28756

CVE-2022-28756 affects Zoom Client for Meetings on macOS (Standard and IT Admin) versions 5.7.3 up to, but not including, 5.11.5. The root cause is a vulnerability in the auto-update process that could allow a local low-privilege user to escalate to root. Multiple connected advisories corroborate...

CVE-2022-28756 Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

The Zoom Client for Meetings for macOS Standard and for IT Admin starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root...