CVE-2022-22782: Local privilege escalation in Windows Zoom Clients
First published: Thu Apr 28 2022(Updated: )
The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.
Credit: security@zoom.us security@zoom.us
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zoom Meetings | <5.9.7 | |
| Zoom Rooms For Conference Rooms | <5.10.0 | |
| Zoom VDI Windows Meeting Clients | <5.9.6 | |
| Zoom Zoom Plugin For Microsoft Outlook | <5.10.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-22782?
CVE-2022-22782 is a vulnerability in the Zoom Client for Meetings for Windows, Zoom Rooms for Conference Room for Windows, Zoom Plugins for Microsoft Outlook for Windows, and Zoom VDI Windows Meeting Clients that allows for local privilege escalation.
Which versions of Zoom are affected by CVE-2022-22782?
Zoom Meetings for Windows versions prior to 5.9.7, Zoom Rooms for Conference Room for Windows versions prior to 5.10.0, Zoom Plugins for Microsoft Outlook for Windows versions prior to 5.10.3, and Zoom VDI Windows Meeting Clients versions prior to 5.9.6 are affected by CVE-2022-22782.
How severe is CVE-2022-22782?
CVE-2022-22782 has a severity rating of 7.1, which is considered high.
How can I fix CVE-2022-22782?
To fix CVE-2022-22782, update your Zoom Client for Meetings, Zoom Rooms for Conference Room, Zoom Plugins for Microsoft Outlook, and Zoom VDI Windows Meeting Clients to versions 5.9.7, 5.10.0, 5.10.3, and 5.9.6 respectively.
Where can I find more information about CVE-2022-22782?
You can find more information about CVE-2022-22782 on Zoom's security bulletin: [https://explore.zoom.us/en/trust/security/security-bulletin/](https://explore.zoom.us/en/trust/security/security-bulletin/)
- collector/nvd-api
- collector/nvd-index
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/last-modified-date
- agent/references
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/zoom
- canonical/zoom meetings
- canonical/zoom rooms for conference rooms
- canonical/zoom vdi windows meeting clients
- canonical/zoom zoom plugin for microsoft outlook