CVE-2022-28756: Zoom Meetings

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.

Affected products

• Zoom Meetings: from 5.7.3, before 5.11.5 (fixed in 5.11.5)

Published 2022-08-15. Last modified 2026-06-17.