CVE-2022-36924
HIGHZoom Rooms < 5.12.6 - Uncontrolled Search Path
Title source: ruleDescription
The Zoom Rooms Installer for Windows prior to 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their privileges to the SYSTEM user.
Scores
CVSS v3
8.8
EPSS
0.0005
EPSS Percentile
14.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
zoom/rooms
< 5.12.6
Timeline
Published
Nov 17, 2022
Tracked Since
Feb 18, 2026