Zscaler Client Connector

• CVE-2026-59570 High 7.5 Android ZCC denial of service 0.1%
• CVE-2026-59569 High 8.1 Android ZCC VPN API method privilege escalation 0.2%
• CVE-2026-25687 High 8.1 ZCC race condition in ZPA tunnel handler 0.4%
• CVE-2026-59568 Critical 9.1 Remote Code Execution 0.7%
• CVE-2026-59567 High 8.8 Local privilege escalation 0.1%
• CVE-2026-59566 High 8.4 Local denial-of-service 0.2%
• CVE-2026-59565 High 8.8 Local and kernel denial-of-service 0.5%
• CVE-2026-59564 Critical 9.1 Authentication bypass between ZCC and client connector portal 0.5%
• CVE-2024-31127 High 7.3 MacOS Zscaler Client Connector Local Privilege Escalation 0.1%
• CVE-2023-28806 Medium 5.7 Signature validation error in DLL allows disabling anti-tampering protection 0.2%
• CVE-2024-23483 High 7.0 Local Privilege Escalation via lack of input validation 0.7%
• CVE-2024-23460 Medium 6.4 Incorrect signature validation of package 0.1%
• CVE-2024-23464 High 7.2 Zscaler bypass with administrative privileges on Windows 0.4%
• CVE-2024-23458 High 7.3 Local Privilege Escalation on Zscaler Client Connector on Windows 0.1%
• CVE-2024-23456 High 7.8 Signature validation issue leads to Anti-Tampering bypass 0.2%
• CVE-2024-23462 Low 3.3 ZCC Mac validinstaller file integrity check missing 0.2%
• CVE-2024-23461 Medium 4.2 ZCC macOS Upgrade ZIP Bomb DoS 0.1%
• CVE-2024-23459 High 7.1 Multiple Arbitrary Creates/Overwrites by link following 0.5%
• CVE-2023-41971 Medium 5.3 Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control 0.2%
• CVE-2023-41970 Medium 6.0 Repair App local code execution with arbitrary privileges 0.1%
• CVE-2023-28798 Medium 6.5 Out-of-bounds write to heap in pacparser 0.4%
• CVE-2024-23480 High 7.5 Insecure MacOS code sign check fallback 0.3%
• CVE-2024-23457 High 7.8 Anti-tampering can be disabled with uninstall password enforced 0.2%
• CVE-2024-23463 High 8.8 Anti-Tampering bypass via Repair App functionality 0.4%
• CVE-2024-23482 High 7.0 ZScalerService Local Privilege Escalation 0.3%
• CVE-2023-41973 High 7.3 Lack of input santization on Zscaler Client Connector enables arbitrary code execution 0.3%
• CVE-2023-41972 High 7.3 Revert password check incorrect type validation 0.2%
• CVE-2023-41969 High 7.3 ZSATrayManager Arbitrary File Deletion 0.3%
• CVE-2023-28802 Medium 4.9 Disable Zscaler using machine tunnel restart 0.2%
• CVE-2023-28794 Medium 4.3 PAC Files Exposed to Internet Websites 0.2%
• CVE-2023-28805 Medium 6.7 ZCC on Linux privilege escalation 0.4%
• CVE-2023-28804 High 8.2 Linux ZCC allows unsigned updates, allowing elevated Code Execution 0.3%
• CVE-2023-28803 Medium 5.9 Traffic being bypassed by ZCC by configuring synthetic IP range as local network 0.3%
• CVE-2023-28797 Medium 6.3 LPE using arbitrary file delete with Symlinks 0.2%
• CVE-2023-28796 High 7.1 IPC Bypass Through PLT Section in ELF 0.2%
• CVE-2023-28795 High 7.8 Client IPC validation bypass 0.1%
• CVE-2023-28793 High 7.8 Heap Based Buffer Overflow in Library 0.3%
• CVE-2021-26738 High 7.8 Privilege Escalation for ZCC macOS via PATH Variable 0.2%
• CVE-2021-26737 Medium 5.5 Privilege Escalation Using PID Reuse in ZCC macOS 0.1%
• CVE-2021-26736 Medium 6.7 ZApp Installer Privilege Escalation Vulnerabilities 0.2%
• CVE-2021-26735 Medium 6.7 Untrusted Search Path While Executing REG DELETE by Uninstaller 0.1%
• CVE-2021-26734 Medium 4.4 Junction Delete leading to elevation of privilege 0.2%
• CVE-2023-28800 High 8.1 Output encoding missing in redrurl parameter 0.5%
• CVE-2023-28799 High 8.2 A URL parameter during login flow was vulnerable to injection. An attacker could insert a malicious domain in this parameter, which would redirect the user after auth and send the authorization token 0.4%