Approved changes feed: RSS · Atom

cpe:2.3:a:zoom_video_communications_inc:zoom_vdi_windows_meeting_clients:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZoom Video Communications Inc (35e29925-d897-5a03-b7c4-27ce30ad5789)
ProductZoom Vdi Windows Meeting Clients (e8a79ee6-6873-5acf-917e-7ea053700de4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28764 vulnerable 2026-06-03 14:46:55.983423 Local information exposure in Zoom Clients
LOW (3.3)
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
Published: 2022-11-14T20:17:59.455Z
Updated: 2025-04-29T19:19:29.673Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28763 vulnerable 2026-06-03 14:46:55.973018 Improper URL parsing in Zoom Clients
HIGH (8.8)
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.2 is susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including session takeovers.
Published: 2022-10-31T19:49:29.955Z
Updated: 2025-05-02T17:53:09.804Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28755 vulnerable 2026-06-03 14:46:55.963542 Improper URL parsing in Zoom Clients
CRITICAL (9.6)
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including the potential for remote code execution through launching executables from arbitrary paths.
Published: 2022-08-11T14:55:46.515Z
Updated: 2024-09-17T02:53:24.397Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22782 vulnerable 2026-06-03 14:46:25.504974 Local privilege escalation in Windows Zoom Clients
HIGH (7.9)
The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.
Published: 2022-04-28T15:00:14.188Z
Updated: 2024-09-17T02:37:08.661Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.