zoom meetings CVE-2022-22786 vulnerability in Zoom Products
Published on May 18, 2022

Update package downgrade in Zoom Client for Meetings for Windows
The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.

NVD

Vulnerability Analysis

CVE-2022-22786 is exploitable with network access, requires user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
REQUIRED
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Products Associated with CVE-2022-22786

stack.watch emails you whenever new vulnerabilities are published in Zoom Meetings or Zoom Rooms. Just hit a watch button to start following.

Zoom Meetings
 
Zoom Rooms
 

Affected Versions

Zoom Video Communications Inc Zoom Client for Meetings for Windows: Zoom Video Communications Inc Zoom Rooms for Conference Room for Windows:

Exploit Probability

EPSS
0.33%
Percentile
55.61%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.