CVE-2022-22780

Zoom Chat Susceptible to Zip Bombing

Medium · published February 9, 2022

CVSS v3.1
4.7
EPSS
2%
Percentile
77.0
In the wild
Unconfirmed
What it is

The Zoom Client for Meetings chat functionality was susceptible to Zip bombing attacks in the following product versions: Android before version 5.8.6, iOS before version 5.9.0, Linux before version 5.8.6, macOS before version 5.7.3, and Windows before version 5.6.3. This could lead to availability issues on the client host by exhausting system resources.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01697 · 77.0th percentile
Published
2022-02-09T22:05Z
EPSS history
Timeline
  • 09 FEB 22:05Z
    Zoom Chat Susceptible to Zip Bombing
    cvelistv5