TI-2022-07033 Aliases CVE-2022-22784 GHSA-2894-36c8-f98v

Improper XML Parsing in Zoom Client for Meetings

MEDIUM 42CWE-91Published 2022-05-18 · Updated 2024-09-16

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

The Zoom Client for Meetings (for Android, iOS, Linux, MacOS, and Windows) before version 5.10.0 failed to properly parse XML stanzas in XMPP messages. This can allow a malicious user to break out of the current XMPP message context and create a new message context to have the receiving users client perform a variety of actions.This issue could be used in a more sophisticated attack to forge XMPP messages from the server.

Why it matters now

EPSS 0.04081 90th percentileScored 2026-11-07

Fix Fixed Zoom Client for Meetings for Android (Zoom Video Communications Inc): 5.10.0Zoom Client for Meetings for iOS (Zoom Video Communications Inc): 5.10.0+3 more products

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Zoom Video Communications, Inc.	Zoom Client for Meetings for Android	before 5.10.0	5.10.0	Patch available	CNA
Zoom Video Communications, Inc.	Zoom Client for Meetings for iOS	before 5.10.0	5.10.0	Patch available	CNA
Zoom Video Communications, Inc.	Zoom Client for Meetings for Linux	before 5.10.0	5.10.0	Patch available	CNA
Zoom Video Communications, Inc.	Zoom Client for Meetings for MacOS	before 5.10.0	5.10.0	Patch available	CNA
Zoom Video Communications, Inc.	Zoom Client for Meetings for Windows	before 5.10.0	5.10.0	Patch available	CNA

Zoom Client for Meetings for Android VendorZoom Video Communications, Inc. Affected before 5.10.0 Fixed in 5.10.0 Patch available CNA
Zoom Client for Meetings for iOS VendorZoom Video Communications, Inc. Affected before 5.10.0 Fixed in 5.10.0 Patch available CNA
Zoom Client for Meetings for Linux VendorZoom Video Communications, Inc. Affected before 5.10.0 Fixed in 5.10.0 Patch available CNA
Zoom Client for Meetings for MacOS VendorZoom Video Communications, Inc. Affected before 5.10.0 Fixed in 5.10.0 Patch available CNA
Zoom Client for Meetings for Windows VendorZoom Video Communications, Inc. Affected before 5.10.0 Fixed in 5.10.0 Patch available CNA

CPE configurations NVD · 5

CPE	Versions	Role	Vendor
cpe:2.3:a:zoom:meetings::::::android::*	before 5.10.0	Vulnerable	Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings::::::iphone_os::*	before 5.10.0	Vulnerable	Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings::::::linux::*	before 5.10.0	Vulnerable	Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings::::::macos::*	before 5.10.0	Vulnerable	Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings::::::windows::*	before 5.10.0	Vulnerable	Zoom Video Communications, Inc.

cpe:2.3:a:zoom:meetings:*:*:*:*:*:android:*:* Versions before 5.10.0 Vulnerable ·Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings:*:*:*:*:*:iphone_os:*:* Versions before 5.10.0 Vulnerable ·Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings:*:*:*:*:*:linux:*:* Versions before 5.10.0 Vulnerable ·Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings:*:*:*:*:*:macos:*:* Versions before 5.10.0 Vulnerable ·Zoom Video Communications, Inc.
cpe:2.3:a:zoom:meetings:*:*:*:*:*:windows:*:* Versions before 5.10.0 Vulnerable ·Zoom Video Communications, Inc.

Remediation

Fix · CNA Zoom Client for Meetings for Android (Zoom Video Communications Inc) Fixed in 5.10.0
Fix · CNA Zoom Client for Meetings for iOS (Zoom Video Communications Inc) Fixed in 5.10.0
Fix · CNA Zoom Client for Meetings for Linux (Zoom Video Communications Inc) Fixed in 5.10.0
Fix · CNA Zoom Client for Meetings for MacOS (Zoom Video Communications Inc) Fixed in 5.10.0
Fix · CNA Zoom Client for Meetings for Windows (Zoom Video Communications Inc) Fixed in 5.10.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2022-05-18
Zoom Client for Meetings for Windows 5.10.0
4 records Highest priority Priority MEDIUM 3 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2022-07034 Improperly constrained session cookies in Zoom Client for MeetingsPriority MEDIUM 45
- TI-2022-07035 Update package downgrade in Zoom Client for Meetings for WindowsPriority MEDIUM 43
- TI-2022-07036 Insufficient hostname validation during Clusterswitch message in Zoom Client for MeetingsPriority LOW 39
Show all 4 records →
Release · 2022-05-18
Zoom Client for Meetings for Android, Zoom Client for Meetings for Linux and 2 more products 5.10.0
3 records Highest priority Priority MEDIUM 2 MEDIUM, 1 LOW
Other records, highest priority first
- TI-2022-07034 Improperly constrained session cookies in Zoom Client for MeetingsPriority MEDIUM 45
- TI-2022-07036 Insufficient hostname validation during Clusterswitch message in Zoom Client for MeetingsPriority LOW 39
Show all 3 records →

Timeline

2026-10-02 Threatist record created from CVE-2022-22784
2026-10-03 Alias added: GHSA-2894-36c8-f98v

References

Advisory 1

https://explore.zoom.us/en/trust/security/security-bulletin

TI-2021-13217 Improper certificate validation in Zoom Client for Meetings for Windows CVSS 3.1CRITICAL 9.8
TI-2021-13457 Buffer overflow in Zoom client and other products CVSS 3.1CRITICAL 9.8
TI-2022-11393 Improper URL parsing in Zoom Clients CVSS 3.1CRITICAL 9.6
TI-2022-07034 Improperly constrained session cookies in Zoom Client for Meetings CVSS 3.1CRITICAL 9.1
TI-2022-07035 Update package downgrade in Zoom Client for Meetings for Windows CVSS 3.1HIGH 8.8
TI-2020-09545 airhost.exe in Zoom Client for Meetings 4.6.11 uses 3423423432325249 as the… CVSS 3.1HIGH 7.5

See all 36 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences