← CVE Intelligence

CVE-2022-28766

DLL injection in Zoom Windows Clients PUBLISHED

Description (CNA)

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.

Affected (CNA)

Vendor / productVersions
Zoom Video Communications Inc / Zoom Client for Meetings for Windows (32-bit)affected unspecified before 5.12.6
Zoom Video Communications Inc / Zoom VDI Windows Meeting Client for Windows (32-bit)affected unspecified before 5.12.6
Zoom Video Communications Inc / Zoom Rooms for Conference Room for Windows (32-bit)affected unspecified before 5.12.6

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.