CVE-2022-28751

CVE-2022-28751 is a privilege escalation vulnerability affecting the Zoom Client for Meetings on macOS, specifically versions prior to 5.11.3. A local, low-privileged user could exploit a flaw in the package signature validation during the update process to gain root privileges. This vulnerability carries a high CVSS score of 7.8 due to its local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, the vulnerability has garnered some community discussion and media coverage.