CVE-2022-22784

8.1 highEPSS 4.1%

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users client perform a variety of actions.This issue could be used in a more sophisticated attack to forge XMPP messages from the server.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 4.1% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-91
Published: 2022-05-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zoom:meetings

References

https://explore.zoom.us/en/trust/security/security-bulletin
https://explore.zoom.us/en/trust/security/security-bulletin

Check your stack JSON