Zoom Alert
3078Warning Date
Severity Level
Warning Number
Target Sector
28 April, 2022
● High
2022-4739
All
Zoom has released security updates to address several vulnerabilities in the following products:
- Zoom Client for Meetings - MacOS (Standard and for IT Admin)
- prior to version 5.9.6
- Zoom Client for Meetings - Windows
- prior to version 5.9.7
- Zoom Rooms for Conference Room - Windows
- prior to version 5.10.0
- All Zoom Plugins for Microsoft Outlook - Windows
- prior to version 5.10.3
- Zoom VDI Windows Meeting Clients
- prior to version 5.9.6
- Zoom On-Premise Meeting Connector Controller
- version 4.8.102.20220310
- Zoom On-Premise Meeting Connector MMR
- version 4.8.102.20220310
An attacker could exploit these vulnerabilities by doing the following:
- Update an unsuspecting user’s currently installed version to a less secure version
- Escalate privileges
The CERT team encourages users to review Zoom security advisory and apply the necessary updates:
Update instructions:
- Sign in to Zoom desktop client
- Click your profile picture then click Check for Updates
- If there is a newer version, Zoom will download and install it.