What’s Vulnerable › Products
Zscaler Client Connector vulnerabilities
51 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 11 published in the last 12 months.
Check whether your Zscaler Client Connector version is affected
Latest Zscaler Client Connector vulnerabilities
- CVE-2026-59570 — Android ZCC denial of service (CVSS 7.5)
- CVE-2026-59569 — Android ZCC VPN API method privilege escalation (CVSS 8.1)
- CVE-2026-25687 — ZCC race condition in ZPA tunnel handler (CVSS 8.1)
- CVE-2026-59568 — Remote Code Execution (CVSS 9.1)
- CVE-2026-59567 — Local privilege escalation (CVSS 8.8)
- CVE-2026-59566 — Local denial-of-service (CVSS 8.4)
- CVE-2026-59565 — Local and kernel denial-of-service (CVSS 8.8)
- CVE-2026-59564 — Authentication bypass between ZCC and client connector portal (CVSS 9.1)
- CVE-2026-22569 — Incorrect startup configuration in ZCC (CVSS 5.3)
- CVE-2025-54983 — Health check port on ZCC allows tunnel bypass (CVSS 5.2)
- CVE-2024-31127 — MacOS Zscaler Client Connector Local Privilege Escalation (CVSS 7.3)
- CVE-2024-23483 — Local Privilege Escalation via lack of input validation (CVSS 9.8)
- CVE-2024-23464 — Zscaler bypass with administrative privileges on Windows (CVSS 4.9)
- CVE-2024-23460 — Incorrect signature validation of package (CVSS 7.8)
- CVE-2024-23458 — Local Privilege Escalation on Zscaler Client Connector on Windows (CVSS 7.8)
- CVE-2024-23456 — Signature validation issue leads to Anti-Tampering bypass (CVSS 7.5)
- CVE-2023-28806 — Signature validation error in DLL allows disabling anti-tampering protection (CVSS 6.5)
- CVE-2024-3661 — DHCP routing options can manipulate interface-based VPN traffic (CVSS 7.6)
- CVE-2024-23462 — ZCC Mac validinstaller file integrity check missing (CVSS 7.5)
- CVE-2024-23461 — ZCC macOS Upgrade ZIP Bomb DoS (CVSS 5.5)
- CVE-2024-23459 — Multiple Arbitrary Creates/Overwrites by link following (CVSS 9.8)
- CVE-2023-41971 — Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control (CVSS 7.8)
- CVE-2023-41970 — Repair App local code execution with arbitrary privileges (CVSS 7.8)
- CVE-2023-28798 — Out-of-bounds write to heap in pacparser (CVSS 9.8)
- CVE-2024-23480 — Insecure MacOS code sign check fallback (CVSS 9.8)