CVE-2022-22788

DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients

High · published June 15, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
73.6
In the wild
Unconfirmed
What it is

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01475 · 73.6th percentile
Published
2022-06-15T20:12Z
EPSS history
Timeline
  • 15 JUN 20:12Z
    DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients
    cvelistv5