The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Zoom |
|
Configuration 1 [-]
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-33203 | The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.12.6 is susceptible to a local information exposure vulnerability. A failure to clear data from a local SQL database after a meeting ends and the usage of an insufficiently secure per-device key encrypting that database results in a local malicious user being able to obtain meeting information such as in-meeting chat for the previous meeting attended from that local user account. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://explore.zoom.us/en/trust/security/security-bulletin/ |
|
History
Tue, 29 Apr 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: Zoom
Published:
Updated: 2025-04-29T19:19:29.673Z
Reserved: 2022-04-06T00:00:00.000Z
Link: CVE-2022-28764
Vulnrichment
Updated: 2024-08-03T06:03:52.601Z
NVD
Status : Modified
Published: 2022-11-14T21:15:13.123
Modified: 2024-11-21T06:57:53.450
Link: CVE-2022-28764
Redhat
No data.
OpenCVE Enrichment
No data.