CVE-2022-28757CWE-345

Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

High · published August 18, 2022

CVSS v3.1
8.8
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2022-08-18T19:31Z
EPSS history
Timeline
  • 18 AUG 19:31Z
    Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
    cvelistv5