Vulnerability · Published Aug 17, 2022 · Assigned by Zoom
CVE-2022-28752Local Privilege Escalation in the Zoom Rooms for Windows Client
High 8.8
In plain English
A high-severity security flaw in Zoom Room for Conference Room for Windows from Zoom Video Communications Inc. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.1%top 96.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability. A local low-privileged malicious user could exploit this vulnerability to escalate their privileges to the SYSTEM user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Zoom Video Communications Inc | Zoom Room for Conference Room for Windows | unspecified – before 5.11.0 |
Weakness: CWE-347 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://explore.zoom.us/en/trust/security/security-bulletin/ x_refsource_MISC