CVE-2022-28756CWE-347

Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

High · published August 15, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Weakness
CWE-347 · Improper Verification of Cryptographic Signature
Published
2022-08-15T22:11Z
EPSS history
Timeline
  • 15 AUG 22:11Z
    Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
    cvelistv5