Insufficient Verification of Data Authenticity Vulnerability CVE-2022-28757 for Zoom Meetings

description-logoDescription

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

affected-products-logoAffected Applications

Zoom

CVE References

CVE-2022-28757