CVE-2022-28756highCWE-347

CVE-2022-28756: fallo de gravedad alta en Zoom Client for Meetings for MacOS

Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Zoom Client for Meetings

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.8epss 0.2%
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Productos afectados
Zoom Video Communications Inc · Zoom Client for Meetings for MacOS
CVEs relacionadas — Zoom Client for Meetings for MacOS

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-22784HIGHImproper XML Parsing in Zoom Client for MeetingsEPSS 4.1%CVE-2022-22787MEDIUMInsufficient hostname validation during Clusterswitch message in Zoom Client for MeetingsEPSS 3.7%CVE-2022-22785MEDIUMImproperly constrained session cookies in Zoom Client for MeetingsEPSS 3.5%CVE-2022-28762HIGHDebugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOSEPSS 0.3%CVE-2022-28757HIGHLocal Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOSEPSS 0.2%CVE-2022-28751HIGHLocal Privilege Escalation in Zoom Client for Meetings for MacOSEPSS 0.1%