<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 15:44:22 +0000</lastBuildDate>
    <item>
      <title>CVE-2022-22787 — Insufficient hostname validation during Clusterswitch message in Zoom Client for Meetings</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2022-22787</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Zoom Video Communications Inc Zoom Client for Meetings for Android, Zoom Video Communications Inc Zoom Client for Meetings for iOS, Zoom Video Communications Inc Zoom Client for Meetings for Linux, Zoom Video Communications Inc Zoom Client for Meetings for MacOS, Zoom Video Communications Inc Zoom Client for Meetings for Windows&lt;/p&gt;
&lt;p&gt;The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Zoom Video Communications Inc Zoom Client for Meetings for Android, Zoom Video Communications Inc Zoom Client for Meetings for iOS, Zoom Video Communications Inc Zoom Client for Meetings for Linux, Zoom Video Communications Inc Zoom Client for Meetings for MacOS, Zoom Video Communications Inc Zoom Client for Meetings for Windows&lt;/p&gt;
&lt;p&gt;The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue could be used in a more sophisticated attack to trick an unsuspecting users client to connect to a malicious server when attempting to use Zoom services.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2022-22787</guid>
    </item>
  </channel>
</rss>
