CVE-2022-36930

Name of the Vulnerable Software and Affected Versions Zoom Rooms for Windows versions prior to 5.13.0

Description The issue is related to an uncontrolled search path element in the Zoom video conferencing software. Exploitation of this issue could allow an attacker to elevate their privileges to the SYSTEM user. A local low-privileged user could exploit this vulnerability in an attack chain to escalate their privileges to the SYSTEM user.

Recommendations For Zoom Rooms for Windows versions prior to 5.13.0, update to version 5.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Zoom Rooms for Windows installer to minimize the risk of exploitation.