Skip to content
OpenAdvisories
High · 8.8 CVE-2022-28751 EUVD-2022-33190GHSA-q3r7-w45x-phvh

Local Privilege Escalation in Zoom Client for Meetings for MacOS

Published Aug 17, 2022 · Updated Sep 16, 2024 · Assigned by Zoom

Description

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the package signature validation during the update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Client for Meetings for MacOS unspecified – < 5.11.3 5.11.3

References