Zoom Client For Meetings For Macos
Approved changes feed: RSS · Atom
cpe:2.3:a:zoom_video_communications_inc:zoom_client_for_meetings_for_macos:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Zoom Video Communications Inc (35e29925-d897-5a03-b7c4-27ce30ad5789) |
|---|---|
| Product | Zoom Client For Meetings For Macos (356a53b3-e371-508d-8f23-540f6a6df3c8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-28762 |
vulnerable | 2026-06-08 05:42:45.743791 |
Debugging port misconfiguration in Zoom Apps in the Zoom Client for Meetings for macOS
HIGH (7.3)
Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with 5.10.6 and prior to 5.12.0 contains a debugging port misconfiguration. When camera mode rendering context is enabled as part of the Zoom App Layers API by running certain Zoom Apps, a local debugging port is opened by the Zoom client. A local malicious user could use this debugging port to connect to and control the Zoom Apps running in the Zoom client.
Published: 2022-10-14T14:51:13.795Z
Updated: 2025-05-14T15:10:48.155Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28757 |
vulnerable | 2026-06-08 05:42:45.740058 |
Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
HIGH (8.8)
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
Published: 2022-08-18T19:31:32.731Z
Updated: 2024-09-16T18:48:28.312Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28756 |
vulnerable | 2026-06-08 05:42:45.739447 |
Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
HIGH (8.8)
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
Published: 2022-08-15T22:11:03.586Z
Updated: 2024-09-17T01:15:56.201Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-28751 |
vulnerable | 2026-06-08 05:42:45.728584 |
Local Privilege Escalation in Zoom Client for Meetings for MacOS
HIGH (8.8)
The Zoom Client for Meetings for MacOS (Standard and for IT Admin) before version 5.11.3 contains a vulnerability in the package signature validation during the update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
Published: 2022-08-17T21:06:25.616Z
Updated: 2024-09-16T18:33:43.457Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22787 |
vulnerable | 2026-06-08 05:40:55.357149 |
Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings
MEDIUM (5.9)
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.
Published: 2022-05-18T16:03:18.179Z
Updated: 2024-09-17T04:14:00.754Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22785 |
vulnerable | 2026-06-08 05:40:55.352748 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22784 |
vulnerable | 2026-06-08 05:40:55.352080 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-22780 |
vulnerable | 2026-06-08 05:40:55.329713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34425 |
vulnerable | 2026-06-08 05:32:13.333365 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.