Zoom Plugin For Microsoft Outlook vulnerabilities

3 CVEs affecting Zoom Plugin For Microsoft Outlook, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22782, published 2022-04-28.

More from Zoom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-34413, published 2021-09-27. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. All versions of the Zoom Plugin for Microsoft Outlook for MacOS before 5.3.52553.0918 contain a Time-of-check Time-of-use (TOC/TOU) vulnerability during the plugin installation process. This could…
• CVE-2022-22782, published 2022-04-28. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. The Zoom Client for Meetings for Windows prior to version 5.9.7, Zoom Rooms for Conference Room for Windows prior to version 5.10.0, Zoom Plugins for Microsoft Outlook for Windows prior to version…
• CVE-2021-34410, published 2021-09-27. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A user-writable application bundle unpacked during the install for all versions of the Zoom Plugin for Microsoft Outlook for Mac before 5.0.25611.0521 allows for privilege escalation to root.