CVE-2022-22784 is a vulnerability in Zoom Meetings
Published on May 18, 2022
Improper XML Parsing in Zoom Client for Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users client perform a variety of actions.This issue could be used in a more sophisticated attack to forge XMPP messages from the server.
Vulnerability Analysis
CVE-2022-22784 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Products Associated with CVE-2022-22784
Want to know whenever a new CVE is published for Zoom Meetings? stack.watch will email you.
Affected Versions
Zoom Video Communications Inc Zoom Client for Meetings for Android:- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
- Version unspecified and below 5.10.0 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.