CVE-2022-28752— Local Privilege Escalation in the Zoom Rooms for Windows Client
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-28752
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local Privilege Escalation in the Zoom Rooms for Windows Client
Source: NVD (National Vulnerability Database)
Vulnerability Description
Zoom Rooms for Conference Rooms for Windows versions before 5.11.0 are susceptible to a Local Privilege Escalation vulnerability. A local low-privileged malicious user could exploit this vulnerability to escalate their privileges to the SYSTEM user.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
密码学签名的验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Zoom Rooms 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zoom Rooms是美国Zoom公司的一个基于软件的会议系统。允许在固定终端上进行网络会议的系统，类似于传统的视频会议系统。 Zoom Rooms for Conference Rooms for Windows 5.11.0之前版本存在安全漏洞，该漏洞源于容易受到本地权限提升漏洞的影响，本地低权限的恶意用户可以利用此漏洞将其权限提升到SYSTEM用户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Zoom Video Communications Inc | Zoom Room for Conference Room for Windows | unspecified ~ 5.11.0 | - |
II. Public POCs for CVE-2022-28752
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-28752
请登录查看更多情报信息。
- https://explore.zoom.us/en/trust/security/security-bulletin/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-28752
IV. Related Vulnerabilities
Same vendor: Zoom Video Communications Inc
- CVE-2023-28597
Improper trust boundary implementation for SMB in Zoom Clien - CVE-2023-28596
Local Privilege Escalation in Zoom for macOS Installers - CVE-2023-22880
Information Disclosure in Zoom for Windows Clients - CVE-2023-22881
Denial of Service in Zoom Clients - CVE-2023-22882
Denial of Service in Zoom Clients
Same weakness: CWE-347
- CVE-2026-42193
Plunk: SNS webhook forgery - CVE-2026-44497
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type - CVE-2026-41669
Admidio: SAML Signature Validation Result Ignored — Forged A - CVE-2026-7689
Dolibarr ERP CRM Online Signature security.lib.php dol_verif - CVE-2026-33467
Improper Verification of Cryptographic Signature in Elastic
V. Comments for CVE-2022-28752
No comments yet