CVE-2022-28755: Improper URL parsing in Zoom Clients
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including the potential for remote code execution through launching executables from arbitrary paths.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-28755?
CVE-2022-28755 has been assigned a severity classification that indicates it poses a risk to users of vulnerable Zoom clients.
How do I fix CVE-2022-28755?
To fix CVE-2022-28755, users should update their Zoom Client to version 5.11.0 or later.
What platforms are affected by CVE-2022-28755?
CVE-2022-28755 affects the Zoom Client on Android, iOS, Linux, macOS, and Windows before version 5.11.0.
What type of vulnerability is CVE-2022-28755?
CVE-2022-28755 is a URL parsing vulnerability that can lead to users connecting to arbitrary network addresses.
Are older versions of Zoom still safe to use given CVE-2022-28755?
No, older versions of Zoom prior to 5.11.0 are not safe to use due to the risk posed by CVE-2022-28755.