Skip to contentZscaler Client Connector vulnerabilities
- zscaler client connectorAndroid ZCC denial of serviceCVE-2026-595707.5 High
- zscaler client connectorAndroid ZCC VPN API method privilege escalationCVE-2026-595698.1 High
- zscaler client connectorZCC race condition in ZPA tunnel handlerCVE-2026-256878.1 High
- zscaler client connectorRemote Code ExecutionCVE-2026-595689.1 Critical
- zscaler client connectorLocal privilege escalationCVE-2026-595678.8 High
- zscaler client connectorLocal denial-of-serviceCVE-2026-595668.4 High
- zscaler client connectorLocal and kernel denial-of-serviceCVE-2026-595658.8 High
- zscaler client connectorAuthentication bypass between ZCC and client connector portalCVE-2026-595649.1 Critical
- zscaler client connectorIncorrect startup configuration in ZCCCVE-2026-225695.4 Medium
- zscaler client connectorHealth check port on ZCC allows tunnel bypassCVE-2025-549835.2 Medium
- zscaler client connectorMacOS Zscaler Client Connector Local Privilege EscalationCVE-2024-311277.3 High
- zscaler client connectorSignature validation error in DLL allows disabling anti-tampering protectionCVE-2023-288065.7 Medium
- zscaler client connectorLocal Privilege Escalation via lack of input validationCVE-2024-234837.0 High
- zscaler client connectorIncorrect signature validation of packageCVE-2024-234606.4 Medium
- zscaler client connectorZscaler bypass with administrative privileges on WindowsCVE-2024-234647.2 High
- zscaler client connectorLocal Privilege Escalation on Zscaler Client Connector on WindowsCVE-2024-234587.3 High
- zscaler client connectorSignature validation issue leads to Anti-Tampering bypassCVE-2024-234567.8 High
- zscaler client connectorZCC Mac validinstaller file integrity check missingCVE-2024-234623.3 Low
- zscaler client connectorZCC macOS Upgrade ZIP Bomb DoSCVE-2024-234614.2 Medium
- zscaler client connectorMultiple Arbitrary Creates/Overwrites by link followingCVE-2024-234597.1 High
- zscaler client connectorWindows ZCC Upgrade DoS And Privilege Escalation Through RPC ControlCVE-2023-419715.3 Medium
- zscaler client connectorRepair App local code execution with arbitrary privilegesCVE-2023-419706.0 Medium
- zscaler client connectorOut-of-bounds write to heap in pacparserCVE-2023-287986.5 Medium
- zscaler client connectorInsecure MacOS code sign check fallbackCVE-2024-234807.5 High
- zscaler client connectorAnti-tampering can be disabled with uninstall password enforcedCVE-2024-234577.8 High
- zscaler client connectorAnti-Tampering bypass via Repair App functionalityCVE-2024-234638.8 High
- zscaler client connectorZScalerService Local Privilege EscalationCVE-2024-234827.0 High
- zscaler client connectorLack of input santization on Zscaler Client Connector enables arbitrary code executionCVE-2023-419737.3 High
- zscaler client connectorRevert password check incorrect type validationCVE-2023-419727.3 High
- zscaler client connectorZSATrayManager Arbitrary File DeletionCVE-2023-419697.3 High
- zscaler client connectorDisable Zscaler using machine tunnel restartCVE-2023-288024.9 Medium
- zscaler client connectorPAC Files Exposed to Internet WebsitesCVE-2023-287944.3 Medium
- zscaler client connectorZCC on Linux privilege escalationCVE-2023-288056.7 Medium
- zscaler client connectorLinux ZCC allows unsigned updates, allowing elevated Code ExecutionCVE-2023-288048.2 High
- zscaler client connectorTraffic being bypassed by ZCC by configuring synthetic IP range as local networkCVE-2023-288035.9 Medium
- zscaler client connectorLPE using arbitrary file delete with SymlinksCVE-2023-287976.3 Medium
- zscaler client connectorIPC Bypass Through PLT Section in ELFCVE-2023-287967.1 High
- zscaler client connectorClient IPC validation bypassCVE-2023-287957.8 High
- zscaler client connectorHeap Based Buffer Overflow in LibraryCVE-2023-287937.8 High
- zscaler client connectorPrivilege Escalation for ZCC macOS via PATH VariableCVE-2021-267387.8 High
- zscaler client connectorPrivilege Escalation Using PID Reuse in ZCC macOSCVE-2021-267375.5 Medium
- zscaler client connectorZApp Installer Privilege Escalation VulnerabilitiesCVE-2021-267366.7 Medium
- zscaler client connectorUntrusted Search Path While Executing REG DELETE by UninstallerCVE-2021-267356.7 Medium
- zscaler client connectorJunction Delete leading to elevation of privilegeCVE-2021-267344.4 Medium
- zscaler client connectorOutput encoding missing in redrurl parameterCVE-2023-288008.1 High
- zscaler client connectorA URL parameter during login flow was vulnerable to injection. An attacker could insert a...CVE-2023-287998.2 High