CVE-2022-28766lowCWE-94

CVE-2022-28766: falha de baixa gravidade em Zoom Client for Meetings for Windows (32-bit)

DLL injection in Zoom Windows Clients

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Zoom Client for Meetings+ Monitorar Zoom Rooms for Conference Room

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 3.3epss 0.5%
Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Zoom Video Communications Inc · Zoom Client for Meetings for Windows (32-bit)Zoom Video Communications Inc · Zoom Rooms for Conference Room for Windows (32-bit)Zoom Video Communications Inc · Zoom VDI Windows Meeting Client for Windows (32-bit)