CC
Product
Client Connector
50
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 30Medium 12Low 0
Watch
Add Client Connector to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23483 | 9.8 | Aug 6 | An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection. This issue affects Zscaler Client Connector on MacOS <4.2 Affected: before 4.2 |
| CVE-2024-23459 | 9.8 | May 2 | An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects… Affected: before 3.7 |
| CVE-2023-28798 | 9.8 | May 2 | An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution Affected: before 3.7 |
| CVE-2024-23480 | 9.8 | May 1 | A fallback mechanism in code sign checking on macOS may allow arbitrary code execution Affected: before 4.2 |
| CVE-2023-28805 | 9.8 | Oct 23 | An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation Affected: before 1.4.0.105 |
| CVE-2020-11633 | 9.8 | Jul 15 | The Zscaler Client Connector for Windows prior to 2.1.2.74 had a stack based buffer overflow when connecting to misconfigured TLS servers Affected: before 2.1.2.81 |
| CVE-2026-59568 | 9.1 | Aug 24 | Remote Code Execution Affected: before Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372; before MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191; before Linux: 3.7.2.64, 4.2.1.64; before Android: 4.2; before ChromeOS: 4.2; before iOS: 4.5.1 |
| CVE-2026-59564 | 9.1 | Aug 24 | Authentication bypass between ZCC and client connector portal Affected: before Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372; before MacOS: 4.5.2.312, 4.7.0.292, 4.8.0.191; before iOS: 4.5.1; before Android: 4.2; before ChromeOS: 4.2; before Linux: 3.7.2.64, 4.2.1.64 |
Showing 8