Approved changes feed: RSS · Atom

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZscaler (8b33ada7-550b-5f0e-9389-e0b74c251549)
ProductClient Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-25687 vulnerable 2026-09-16 04:33:14.397328 ZCC race condition in ZPA tunnel handler
HIGH (8.1)
A race condition in the ZPA tunnel handler of affected versions of Zscaler Client Connector (ZCC) allows a heap corruption, resulting in a denial of service (client crash) and potentially arbitrary code execution in the context of the ZCC process.
Published: 2026-09-14T14:37:04.331Z
Updated: 2026-09-15T03:56:03.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59570 vulnerable 2026-09-16 04:32:46.846039 Android ZCC denial of service
HIGH (7.5)
On affected versions of Zscaler client connector, a pre-installed peer app can tear down the Zscaler tunnel, force user logout, and toggle packet capture.
Published: 2026-09-14T14:47:13.914Z
Updated: 2026-09-14T15:32:24.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59569 vulnerable 2026-09-16 04:32:46.574510 Android ZCC VPN API method privilege escalation
HIGH (8.1)
An improper input validation vulnerability in Zscaler Client Connector on Android and ChromeOS allows an attacker to potentially bypass Zscaler controls.
Published: 2026-09-14T14:42:34.523Z
Updated: 2026-09-15T03:56:05.059Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31127 vulnerable 2026-06-08 06:35:30.982698 MacOS Zscaler Client Connector Local Privilege Escalation
HIGH (7.3)
An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their privileges.
Published: 2025-06-04T04:45:07.342Z
Updated: 2025-06-04T13:46:50.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23483 vulnerable 2026-06-08 06:29:39.784240 Local Privilege Escalation via lack of input validation
HIGH (7)
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.
Published: 2024-08-06T15:30:51.851Z
Updated: 2024-08-06T18:08:53.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23482 vulnerable 2026-06-08 06:29:39.783721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23480 vulnerable 2026-06-08 06:29:39.783372 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23464 vulnerable 2026-06-08 06:29:39.772786 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23463 vulnerable 2026-06-08 06:29:39.772427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23462 vulnerable 2026-06-08 06:29:39.771821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23461 vulnerable 2026-06-08 06:29:39.771364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23460 vulnerable 2026-06-08 06:29:39.770836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23459 vulnerable 2026-06-08 06:29:39.769128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23458 vulnerable 2026-06-08 06:29:39.766665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23457 vulnerable 2026-06-08 06:29:39.766079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23456 vulnerable 2026-06-08 06:29:39.763466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41973 vulnerable 2026-06-08 06:11:07.577649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41972 vulnerable 2026-06-08 06:11:07.577066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41971 vulnerable 2026-06-08 06:11:07.576551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41970 vulnerable 2026-06-08 06:11:07.575881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41969 vulnerable 2026-06-08 06:11:07.573619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28806 vulnerable 2026-06-08 06:02:35.783936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28805 vulnerable 2026-06-08 06:02:35.783231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28804 vulnerable 2026-06-08 06:02:35.782642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28803 vulnerable 2026-06-08 06:02:35.782122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28802 vulnerable 2026-06-08 06:02:35.781508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28800 vulnerable 2026-06-08 06:02:35.775585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28799 vulnerable 2026-06-08 06:02:35.765662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28798 vulnerable 2026-06-08 06:02:35.763561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28797 vulnerable 2026-06-08 06:02:35.758484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28796 vulnerable 2026-06-08 06:02:35.757923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28795 vulnerable 2026-06-08 06:02:35.757427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28794 vulnerable 2026-06-08 06:02:35.756831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28793 vulnerable 2026-06-08 06:02:35.755171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26738 vulnerable 2026-06-08 05:30:45.197318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26737 vulnerable 2026-06-08 05:30:45.195440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26736 vulnerable 2026-06-08 05:30:45.194959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26735 vulnerable 2026-06-08 05:30:45.194548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26734 vulnerable 2026-06-08 05:30:45.193144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.