VULNERABILITY INTELLIGENCE

CVE-2022-22787

CVSS score7.5 HIGH

EPSS probability3.69%

CISA KEVNot currently listed

Published2022-05-18

Last modified2026-06-17

Description

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.