CVE-2022-22786 HIGH

CVE-2022-22786: Update package downgrade in Zoom Client for Meetings for Windows

Vendor Zoom Video Communications Inc
Product Zoom Client for Meetings for Windows
Published May 18, 2022
Last update June 2, 2026
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

The Zoom Client for Meetings for Windows before version 5.10.0 and Zoom Rooms for Conference Room for Windows before version 5.10.0, fails to properly check the installation version during the update process. This issue could be used in a more sophisticated attack to trick a user into downgrading their Zoom client to a less secure version.

Key dates

02Disclosure timeline

May 18, 2022 CVE published
June 2, 2026 Record updated