CVE-2022-28755: The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious…

PriorityP432medium6.1CVSS 3.1

AVNACLPRNUIRSCCLILAN

EPSS

0.73%

49.5th percentile

The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.11.0 are susceptible to a URL parsing vulnerability. If a malicious Zoom meeting URL is opened, the malicious link may direct the user to connect to an arbitrary network address, leading to additional attacks including the potential for remote code execution through launching executables from arbitrary paths.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
zoom	virtual_desktop_infrastructure	< 5.10.7	5.10.7
zoom	zoom	< 5.11.0	5.11.0
zoom_video_communications_inc	zoom_vdi_windows_meeting_clients	>= unspecified < 5.10.7	5.10.7

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.