CVE-2022-36930
HIGHZoom Rooms < 5.13.0 - Uncontrolled Search Path
Title source: ruleDescription
Zoom Rooms for Windows installers before version 5.13.0 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain to escalate their privileges to the SYSTEM user.
Scores
CVSS v3
8.8
EPSS
0.0022
EPSS Percentile
44.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
zoom/rooms
< 5.13.0
Timeline
Published
Jan 09, 2023
Tracked Since
Feb 18, 2026