Skip to content
OpenAdvisories
Low · 3.3 CVE-2022-28766 EUVD-2022-33205GHSA-c744-gxrc-9rh4

DLL injection in Zoom Windows Clients

Published Nov 17, 2022 · Updated Apr 29, 2025 · Assigned by Zoom

Description

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.

Affected products

VendorProductAffectedFixed
Zoom Video Communications Zoom Client for Meetings for Windows (32-bit) unspecified – < 5.12.6 5.12.6
Zoom Video Communications Zoom VDI Windows Meeting Client for Windows (32-bit) unspecified – < 5.12.6 5.12.6
Zoom Video Communications Zoom Rooms for Conference Room for Windows (32-bit) unspecified – < 5.12.6 5.12.6

References