CVE-2022-28768

—

CVSS 3.1

7.8 high

EPSS

<1%p8

Published

Nov 17, 2022 (Nov 17, 2022)

Modified

Jun 17, 2026

Description

The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to root.

Vendors: zoom
Products: meetings
Weakness: CWE-689, CWE-362
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.