CVE-2022-28766

LOW

Zoom Client <5.12.6 - Code Injection

Title source: llm

Description

Windows 32-bit versions of the Zoom Client for Meetings before 5.12.6 and Zoom Rooms for Conference Room before version 5.12.6 are susceptible to a DLL injection vulnerability. A local low-privileged user could exploit this vulnerability to run arbitrary code in the context of the Zoom client.

References (1)

[Vendor Advisory] https://explore.zoom.us/en/trust/security/security-bulletin/

Scores

CVSS v3 3.3

EPSS 0.0044

EPSS Percentile 62.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-427 CWE-94

Status published

Affected Products (2)

zoom/meetings < 5.12.6

zoom/rooms < 5.12.6

Timeline

Published Nov 17, 2022

Tracked Since Feb 18, 2026