PT-2023-13510 · Zoom · Zoom Rooms For Macos

Published 2023-01-09 · Updated 2023-01-13 · CVE-2022-36927

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Zoom Rooms for macOS versions prior to 5.11.3

Description A local privilege escalation issue allows a low-privileged user to gain root access. This can be exploited by a local user to escalate their privileges.

Recommendations For versions prior to 5.11.3, update to version 5.11.3 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive system resources to minimize the risk of exploitation.

Fix

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2022-36927

Affected Products

Zoom Rooms For Macos

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-36927 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36927 · Vendor Advisory
• https://explore.zoom.us/en/trust/security/security-bulletin · Vendor Advisory
• https://t.me/cibsecurity/56168 · Telegram Post
• https://t.me/echeloneyes/1064 · Telegram Post