CVE-2022-22781

7.5 highEPSS 0.4%

High (7.5) in zoom meetings. EPSS 0.4% chance of exploitation in the next 30 days.

The Zoom Client for Meetings for MacOS (Standard and for IT Admin) prior to version 5.9.6 failed to properly check the package version during the update process. This could lead to a malicious actor updating an unsuspecting user’s currently installed version to a less secure version.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 36% of CVEs (scores of 2026-10-31)
CWE: CWE-354
Published: 2022-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoom:meetings

References

https://explore.zoom.us/en/trust/security/security-bulletin/
https://explore.zoom.us/en/trust/security/security-bulletin/

Check your stack JSON