CVE-2022-22781

Update package downgrade in Zoom Client for Meetings for MacOS

High · published April 28, 2022

CVSS v3.1
7.5
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version to a less secure version.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Published
2022-04-28T14:59Z
EPSS history
Timeline
  • 28 APR 14:59Z
    Update package downgrade in Zoom Client for Meetings for MacOS
    cvelistv5