CVE-2022-22786

Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings versions prior to 5.10.0 Zoom Rooms for Conference Room versions prior to 5.10.0

Description The issue is related to the improper checking of the installation version during the update process. This could be exploited in a sophisticated attack to trick a user into downgrading their client to a less secure version, potentially allowing a remote attacker to bypass certain security restrictions.

Recommendations For Zoom Client for Meetings versions prior to 5.10.0, update to version 5.10.0 or later to resolve the issue. For Zoom Rooms for Conference Room versions prior to 5.10.0, update to version 5.10.0 or later to resolve the issue. As a temporary workaround, consider restricting the update process to prevent potential downgrades until a patch is applied.