CVE-2022-28764

CVE-2022-28764 is a local information exposure vulnerability affecting Zoom Client for Meetings on Android, iOS, Linux, macOS, and Windows, as well as Zoom Rooms and Zoom VDI. This flaw allows a local malicious user to access sensitive meeting data, such as in-meeting chat, from a local SQL database due to improper data clearing and weak encryption after a meeting concludes. Rated with a CVSS score of 3.3 (LOW), the vulnerability requires local access and user privileges, with the primary impact being a limited compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.