Approved changes feed: RSS · Atom

cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZscaler (8b33ada7-550b-5f0e-9389-e0b74c251549)
ProductClient Connector (bb852fb1-4e37-50bb-bf86-92fbacf5703d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31127 vulnerable 2026-06-08 06:35:30.982698 MacOS Zscaler Client Connector Local Privilege Escalation
HIGH (7.3)
An improper verification of a loaded library in Zscaler Client Connector on Mac < 4.2.0.241 may allow a local attacker to elevate their privileges.
Published: 2025-06-04T04:45:07.342Z
Updated: 2025-06-04T13:46:50.573Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23483 vulnerable 2026-06-08 06:29:39.784240 Local Privilege Escalation via lack of input validation
HIGH (7)
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2.
Published: 2024-08-06T15:30:51.851Z
Updated: 2024-08-06T18:08:53.764Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23482 vulnerable 2026-06-08 06:29:39.783721 ZScalerService Local Privilege Escalation
HIGH (7)
The ZScaler service is susceptible to a local privilege escalation vulnerability found in the ZScalerService process. Fixed Version: Mac ZApp 4.2.0.241 and later.
Published: 2024-03-26T14:23:20.100Z
Updated: 2024-08-05T14:40:13.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23480 vulnerable 2026-06-08 06:29:39.783372 Insecure MacOS code sign check fallback
HIGH (7.5)
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
Published: 2024-05-01T16:27:35.730Z
Updated: 2024-08-01T23:06:24.712Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23464 vulnerable 2026-06-08 06:29:39.772786 Zscaler bypass with administrative privileges on Windows
HIGH (7.2)
In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1
Published: 2024-08-06T15:24:03.730Z
Updated: 2024-08-06T15:41:17.867Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23463 vulnerable 2026-06-08 06:29:39.772427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23462 vulnerable 2026-06-08 06:29:39.771821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23461 vulnerable 2026-06-08 06:29:39.771364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23460 vulnerable 2026-06-08 06:29:39.770836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23459 vulnerable 2026-06-08 06:29:39.769128 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23458 vulnerable 2026-06-08 06:29:39.766665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23457 vulnerable 2026-06-08 06:29:39.766079 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23456 vulnerable 2026-06-08 06:29:39.763466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41973 vulnerable 2026-06-08 06:11:07.577649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41972 vulnerable 2026-06-08 06:11:07.577066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41971 vulnerable 2026-06-08 06:11:07.576551 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41970 vulnerable 2026-06-08 06:11:07.575881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41969 vulnerable 2026-06-08 06:11:07.573619 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28806 vulnerable 2026-06-08 06:02:35.783936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28805 vulnerable 2026-06-08 06:02:35.783231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28804 vulnerable 2026-06-08 06:02:35.782642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28803 vulnerable 2026-06-08 06:02:35.782122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28802 vulnerable 2026-06-08 06:02:35.781508 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28800 vulnerable 2026-06-08 06:02:35.775585 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28799 vulnerable 2026-06-08 06:02:35.765662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28798 vulnerable 2026-06-08 06:02:35.763561 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28797 vulnerable 2026-06-08 06:02:35.758484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28796 vulnerable 2026-06-08 06:02:35.757923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28795 vulnerable 2026-06-08 06:02:35.757427 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28794 vulnerable 2026-06-08 06:02:35.756831 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28793 vulnerable 2026-06-08 06:02:35.755171 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26738 vulnerable 2026-06-08 05:30:45.197318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26737 vulnerable 2026-06-08 05:30:45.195440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26736 vulnerable 2026-06-08 05:30:45.194959 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26735 vulnerable 2026-06-08 05:30:45.194548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-26734 vulnerable 2026-06-08 05:30:45.193144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.