VULNERABILITY INTELLIGENCE

CVE-2022-22781

CVSS score7.5 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2022-04-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version to a less secure version.

Weakness classification

  • nvd@nist.gov: CWE-354

Primary references