CVE-2022-22782 Local privilege escalation in Windows Zoom Clients

High 7.9 Published 28 Apr 2022 Updated 17 Sep 2024

A local attacker can exploit an installer repair flaw to delete system files, causing integrity or availability issues on Windows hosts.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2022-22782?

CVE-2022-22782 is a high-severity vulnerability in Zoom Client for Meetings for Windows, published on 28 Apr 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version 5.10.3, and Zoom VDI Windows Meeting Clients prior to version 5.9.6; was susceptible to a local privilege escalation issue during the installer repair operation. A malicious actor could utilize this to potentially delete system level files or folders, causing integrity or availability issues on the user’s host machine.

Which versions are affected by CVE-2022-22782?

It affects 4 products.

Products include Zoom Meetings, Zoom Rooms for Conference Rooms, Zoom Vdi Windows Meeting Clients, Zoom Zoom Plugin for Microsoft Outlook.

How do I fix CVE-2022-22782?

No fix has been published for CVE-2022-22782 yet. Limit exposure of the affected software until one is available.

Is CVE-2022-22782 being exploited?

There is no known exploitation of CVE-2022-22782 in the wild and no public exploit code.

Sources

Also known as GHSA-qjqx-h284-wx2f.