Zoom

Malicious actors can exploit the CVE-2023-22885 vulnerability by setting up a rogue SMB server to respond to client requests

The vulnerabilities tracked as CVE-2022-36926, CVE-2022-36927, CVE-2022-36930, and CVE-2022-36929, and all rated high severity

A local low-privileged user could exploit CVE-2022-36924 during the install process to escalate their privileges to the SYSTEM user

An attacker could exploit CVE-2022-28763 using a specially-crafted Zoom meeting URL to redirect a victim to arbitrary websites