Approved changes feed: RSS · Atom

cpe:2.3:a:zscaler:client_connector:-:*:*:*:*:macos:*:*

part: a version: - update: *

VendorZscaler (8b33ada7-550b-5f0e-9389-e0b74c251549)
ProductClient Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23480 vulnerable 2026-06-08 06:29:39.783331 Insecure MacOS code sign check fallback
HIGH (7.5)
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
Published: 2024-05-01T16:27:35.730Z
Updated: 2024-08-01T23:06:24.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23461 vulnerable 2026-06-08 06:29:39.771325 ZCC macOS Upgrade ZIP Bomb DoS
MEDIUM (4.2)
An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4.
Published: 2024-05-02T13:11:29.433Z
Updated: 2024-08-01T23:06:24.232Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23459 vulnerable 2026-06-08 06:29:39.768983 Multiple Arbitrary Creates/Overwrites by link following
HIGH (7.1)
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7.
Published: 2024-05-02T13:11:19.436Z
Updated: 2024-08-01T23:06:24.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28798 vulnerable 2026-06-08 06:02:35.763400 Out-of-bounds write to heap in pacparser
MEDIUM (6.5)
An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.
Published: 2024-05-02T13:10:31.933Z
Updated: 2024-08-02T13:51:38.162Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.