Zoom Security Updates 09 January 2023

the addressed vulnerabilities could allow the locally authenticated attacker to gain elevated privileges, bypass security restrictions, or traverse directories on the system.

Samples of the addressed vulnerabilities:

1. Zoom Rooms for macOS Privilege Escalation (CVE-2022-36926):

• CVSS: 8.8

• Attack Vector: Local

• Attack Complexity: Low

• Privileges Required: Low

• User Interaction: None

• Consequences: Gain Privileges

2. Zoom Rooms for Windows Installers Privilege Escalation (CVE-2022-36930):

• CVSS: 8.2

• Attack Vector: Local

• Attack Complexity: Low

• Privileges Required: Low

• User Interaction: Required

• Consequences: Gain Privilege

Sample of the affected products:

• Zoom Rooms for Windows clients before version 5.13.0.

• Zoom for Android clients before version 5.13.0.

• Zoom Rooms for macOS before version 5.11.4.