Vulnerabilities > Zoom > Meetings > 5.9.6

DATE CVE VULNERABILITY TITLE RISK
2022-08-15 CVE-2022-28756 Unspecified vulnerability in Zoom Meetings
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability in the auto update process.
local
low complexity
zoom
7.8
2022-05-18 CVE-2022-22787 Improper Certificate Validation vulnerability in Zoom Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request.
network
high complexity
zoom CWE-295
7.5
2022-05-18 CVE-2022-22784 XML Injection (aka Blind XPath Injection) vulnerability in Zoom Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages.
network
low complexity
zoom CWE-91
8.1
2022-05-18 CVE-2022-22785 Reliance on Cookies without Validation and Integrity Checking vulnerability in Zoom Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly constrain client session cookies to Zoom domains.
network
low complexity
zoom CWE-565
critical
9.1