Zscaler Client Connector vulnerabilities

• zscaler client connector Incorrect startup configuration in ZCC CVE-2026-22569 5.4 MediumMarch 31, 2026
• zscaler client connector Signature validation error in DLL allows disabling anti-tampering protection CVE-2023-28806 5.7 MediumAugust 6, 2024
• zscaler client connector Local Privilege Escalation via lack of input validation CVE-2024-23483 7.0 HighAugust 6, 2024
• zscaler client connector Incorrect signature validation of package CVE-2024-23460 6.4 MediumAugust 6, 2024
• zscaler client connector Zscaler bypass with administrative privileges on Windows CVE-2024-23464 7.2 HighAugust 6, 2024
• zscaler client connector Local Privilege Escalation on Zscaler Client Connector on Windows CVE-2024-23458 7.3 HighAugust 6, 2024
• zscaler client connector Signature validation issue leads to Anti-Tampering bypass CVE-2024-23456 7.8 HighAugust 6, 2024
• ietf dhcp, cisco anyconnect vpn client, secure client +7 more +9 more DHCP routing options can manipulate interface-based VPN traffic CVE-2024-3661 Public exploitFix available 7.6 HighMay 6, 2024
• zscaler client connector ZCC Mac validinstaller file integrity check missing CVE-2024-23462 3.3 LowMay 2, 2024
• zscaler client connector ZCC macOS Upgrade ZIP Bomb DoS CVE-2024-23461 4.2 MediumMay 2, 2024
• zscaler client connector Multiple Arbitrary Creates/Overwrites by link following CVE-2024-23459 7.1 HighMay 2, 2024
• zscaler client connector Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control CVE-2023-41971 5.3 MediumMay 2, 2024
• zscaler client connector Repair App local code execution with arbitrary privileges CVE-2023-41970 6.0 MediumMay 2, 2024
• zscaler client connector Out-of-bounds write to heap in pacparser CVE-2023-28798 6.5 MediumMay 2, 2024
• zscaler client connector Insecure MacOS code sign check fallback CVE-2024-23480 7.5 HighMay 1, 2024
• zscaler client connector Anti-tampering can be disabled with uninstall password enforced CVE-2024-23457 7.8 HighMay 1, 2024
• zscaler client connector Anti-Tampering bypass via Repair App functionality CVE-2024-23463 8.8 HighApril 30, 2024
• zscaler client connector ZScalerService Local Privilege Escalation CVE-2024-23482 7.0 HighMarch 26, 2024
• zscaler client connector Lack of input santization on Zscaler Client Connector enables arbitrary code execution CVE-2023-41973 7.3 HighMarch 26, 2024
• zscaler client connector Revert password check incorrect type validation CVE-2023-41972 7.3 HighMarch 26, 2024
• zscaler client connector ZSATrayManager Arbitrary File Deletion CVE-2023-41969 7.3 HighMarch 26, 2024
• zscaler client connector Disable Zscaler using machine tunnel restart CVE-2023-28802 4.9 MediumNovember 21, 2023
• zscaler client connector PAC Files Exposed to Internet Websites CVE-2023-28794 4.3 MediumNovember 6, 2023
• zscaler client connector ZCC on Linux privilege escalation CVE-2023-28805 6.7 MediumOctober 23, 2023
• zscaler client connector Linux ZCC allows unsigned updates, allowing elevated Code Execution CVE-2023-28804 8.2 HighOctober 23, 2023
• zscaler client connector Traffic being bypassed by ZCC by configuring synthetic IP range as local network CVE-2023-28803 5.9 MediumOctober 23, 2023
• zscaler client connector LPE using arbitrary file delete with Symlinks CVE-2023-28797 6.3 MediumOctober 23, 2023
• zscaler client connector IPC Bypass Through PLT Section in ELF CVE-2023-28796 7.1 HighOctober 23, 2023
• zscaler client connector Client IPC validation bypass CVE-2023-28795 7.8 HighOctober 23, 2023
• zscaler client connector Heap Based Buffer Overflow in Library CVE-2023-28793 7.8 HighOctober 23, 2023
• zscaler client connector Privilege Escalation for ZCC macOS via PATH Variable CVE-2021-26738 7.8 HighOctober 23, 2023
• zscaler client connector Privilege Escalation Using PID Reuse in ZCC macOS CVE-2021-26737 5.5 MediumOctober 23, 2023
• zscaler client connector ZApp Installer Privilege Escalation Vulnerabilities CVE-2021-26736 6.7 MediumOctober 23, 2023
• zscaler client connector Untrusted Search Path While Executing REG DELETE by Uninstaller CVE-2021-26735 6.7 MediumOctober 23, 2023
• zscaler client connector Junction Delete leading to elevation of privilege CVE-2021-26734 4.4 MediumOctober 23, 2023
• zscaler client connector Output encoding missing in redrurl parameter CVE-2023-28800 8.1 HighJune 22, 2023
• zscaler client connector A URL parameter during login flow was vulnerable to injection. An attacker could insert a... CVE-2023-28799 8.2 HighJune 22, 2023
• zscaler client connector The Zscaler Client Connector for Windows prior to 2.1.2.105 had a DLL hijacking vulnerability... CVE-2020-11634 7.8 HighJuly 15, 2021
• zscaler client connector The Zscaler Client Connector prior to 2.1.2.150 did not quote the search path for services, which... CVE-2020-11632 7.8 HighJuly 15, 2021
• zscaler client connector The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when... CVE-2020-11633 9.8 CriticalJuly 15, 2021
• zscaler client connector The Zscaler Client Connector prior to 3.1.0 did not sufficiently validate RPC clients, which... CVE-2020-11635 7.8 HighFebruary 16, 2021