CVE-2022-28762: falha de alta gravidade em Zoom Client for Meetings for MacOS
Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.3epss 0.3%
Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the Zoom client. A local malicious user could use this debugging port to connect to and control the Zoom Apps running in the Zoom client.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
Zoom Video Communications Inc · Zoom Client for Meetings for MacOSCVEs relacionadas — Zoom Client for Meetings for MacOS
No mesmo produto, das mais perigosas para as menos.
CVE-2022-22784HIGHImproper XML Parsing in Zoom Client for MeetingsEPSS 4.1%CVE-2022-22787MEDIUMInsufficient hostname validation during Clusterswitch message in Zoom Client for MeetingsEPSS 3.7%CVE-2022-22785MEDIUMImproperly constrained session cookies in Zoom Client for MeetingsEPSS 3.5%CVE-2022-28757HIGHLocal Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOSEPSS 0.2%CVE-2022-28756HIGHLocal Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOSEPSS 0.2%CVE-2022-28751HIGHLocal Privilege Escalation in Zoom Client for Meetings for MacOSEPSS 0.1%