CVE-2022-22788: DLL injection in Zoom Opener installer for Zoom and Zoom Rooms clients

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-15 · updated 2026-06-17
Weakness: CWE-427

Description

The Zoom Opener installer is downloaded by a user from the Launch meeting page, when attempting to join a meeting without having the Zoom Meeting Client installed. The Zoom Opener installer for Zoom Client for Meetings before version 5.10.3 and Zoom Rooms for Conference Room for Windows before version 5.10.3 are susceptible to a DLL injection attack. This vulnerability could be used to run arbitrary code on the victims host.

Affected products

Zoom Workplace: before 5.10.3 — fixed in 5.10.3
Zoom Video Communications, Inc. Zoom Rooms for Windows: before 5.10.3 — fixed in 5.10.3

How to fix

Upgrade to a fixed version: Zoom Workplace 5.10.3; Zoom Video Communications, Inc. Zoom Rooms for Windows 5.10.3. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-22788 or the next vulnerability affects your stack