Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_video_communications_inc:zoom_client_for_meetings_for_macos_(standard_and_for_it_admin):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Video Communications Inc (35e29925-d897-5a03-b7c4-27ce30ad5789)
ProductZoom Client For Meetings For Macos (Standard And For It Admin) (33fda14c-5c83-514d-88b2-75849ac59ff4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22781 vulnerable 2026-06-03 14:46:25.500498 Update package downgrade in Zoom Client for Meetings for MacOS
HIGH (7.5)
The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version to a less secure version.
Published: 2022-04-28T14:59:42.884Z
Updated: 2024-09-16T21:03:45.189Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34409 vulnerable 2026-06-03 14:44:44.904717 Zoom Client Installer Local Privilege Escalation
HIGH (7.8)
It was discovered that the installation packages of the Zoom Client for Meetings for MacOS (Standard and for IT Admin) installation before version 5.2.0, Zoom Client Plugin for Sharing iPhone/iPad before version 5.2.0, and Zoom Rooms for Conference before version 5.1.0, copy pre- and post- installation shell scripts to a user-writable directory. In the affected products listed below, a malicious actor with local access to a user's machine could use this flaw to potentially run arbitrary system commands in a higher privileged context during the installation process.
Published: 2021-09-27T13:55:40.225Z
Updated: 2024-09-16T23:46:09.631Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.