agentprime: zscaler-client-connector

agentprime: zscaler-client-connectorEvery new CVE for zscaler-client-connector.https://agentprime.io/CVE-2026-59570: Android ZCC denial of servicehttps://agentprime.io/advisories/CVE-2026-59570/https://agentprime.io/advisories/CVE-2026-59570/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 14:47:13 GMTCVECVE-2026-59569: Android ZCC VPN API method privilege escalationhttps://agentprime.io/advisories/CVE-2026-59569/https://agentprime.io/advisories/CVE-2026-59569/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 14:42:34 GMTCVECVE-2026-25687: ZCC race condition in ZPA tunnel handlerhttps://agentprime.io/advisories/CVE-2026-25687/https://agentprime.io/advisories/CVE-2026-25687/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 14:37:04 GMTCVECVE-2026-59568: Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-59568/https://agentprime.io/advisories/CVE-2026-59568/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:44:21 GMTCVEcriticalCVE-2026-59567: Local privilege escalationhttps://agentprime.io/advisories/CVE-2026-59567/https://agentprime.io/advisories/CVE-2026-59567/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:41:38 GMTCVECVE-2026-59566: Local denial-of-servicehttps://agentprime.io/advisories/CVE-2026-59566/https://agentprime.io/advisories/CVE-2026-59566/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:41:04 GMTCVECVE-2026-59565: Local and kernel denial-of-servicehttps://agentprime.io/advisories/CVE-2026-59565/https://agentprime.io/advisories/CVE-2026-59565/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:40:23 GMTCVECVE-2026-59564: Authentication bypass between ZCC and client connector portalhttps://agentprime.io/advisories/CVE-2026-59564/https://agentprime.io/advisories/CVE-2026-59564/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 24 Aug 2026 13:39:16 GMTCVEcriticalCVE-2026-22569: Incorrect startup configuration in ZCChttps://agentprime.io/advisories/CVE-2026-22569/https://agentprime.io/advisories/CVE-2026-22569/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 31 Mar 2026 14:54:57 GMTCVECVE-2025-54983: Health check port on ZCC allows tunnel bypasshttps://agentprime.io/advisories/CVE-2025-54983/https://agentprime.io/advisories/CVE-2025-54983/CVSS 5.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 12 Nov 2025 03:07:39 GMTCVECVE-2024-31127: MacOS Zscaler Client Connector Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-31127/https://agentprime.io/advisories/CVE-2024-31127/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Jun 2025 04:45:07 GMTCVECVE-2023-28806: Signature validation error in DLL allows disabling anti-tampering protectionhttps://agentprime.io/advisories/CVE-2023-28806/https://agentprime.io/advisories/CVE-2023-28806/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:41:01 GMTCVECVE-2024-23483: Local Privilege Escalation via lack of input validationhttps://agentprime.io/advisories/CVE-2024-23483/https://agentprime.io/advisories/CVE-2024-23483/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:30:51 GMTCVECVE-2024-23460: Incorrect signature validation of packagehttps://agentprime.io/advisories/CVE-2024-23460/https://agentprime.io/advisories/CVE-2024-23460/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:29:26 GMTCVECVE-2024-23464: Zscaler bypass with administrative privileges on Windowshttps://agentprime.io/advisories/CVE-2024-23464/https://agentprime.io/advisories/CVE-2024-23464/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:24:03 GMTCVECVE-2024-23458: Local Privilege Escalation on Zscaler Client Connector on Windowshttps://agentprime.io/advisories/CVE-2024-23458/https://agentprime.io/advisories/CVE-2024-23458/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:22:58 GMTCVECVE-2024-23456: Signature validation issue leads to Anti-Tampering bypasshttps://agentprime.io/advisories/CVE-2024-23456/https://agentprime.io/advisories/CVE-2024-23456/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Aug 2024 15:21:51 GMTCVECVE-2024-23462: ZCC Mac validinstaller file integrity check missinghttps://agentprime.io/advisories/CVE-2024-23462/https://agentprime.io/advisories/CVE-2024-23462/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:11:38 GMTCVECVE-2024-23461: ZCC macOS Upgrade ZIP Bomb DoShttps://agentprime.io/advisories/CVE-2024-23461/https://agentprime.io/advisories/CVE-2024-23461/CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:11:29 GMTCVECVE-2024-23459: Multiple Arbitrary Creates/Overwrites by link followinghttps://agentprime.io/advisories/CVE-2024-23459/https://agentprime.io/advisories/CVE-2024-23459/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:11:19 GMTCVECVE-2023-41971: Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Controlhttps://agentprime.io/advisories/CVE-2023-41971/https://agentprime.io/advisories/CVE-2023-41971/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:11:07 GMTCVECVE-2023-41970: Repair App local code execution with arbitrary privilegeshttps://agentprime.io/advisories/CVE-2023-41970/https://agentprime.io/advisories/CVE-2023-41970/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:10:51 GMTCVECVE-2023-28798: Out-of-bounds write to heap in pacparserhttps://agentprime.io/advisories/CVE-2023-28798/https://agentprime.io/advisories/CVE-2023-28798/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 May 2024 13:10:31 GMTCVECVE-2024-23480: Insecure MacOS code sign check fallbackhttps://agentprime.io/advisories/CVE-2024-23480/https://agentprime.io/advisories/CVE-2024-23480/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 16:27:35 GMTCVECVE-2024-23457: Anti-tampering can be disabled with uninstall password enforcedhttps://agentprime.io/advisories/CVE-2024-23457/https://agentprime.io/advisories/CVE-2024-23457/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 May 2024 16:26:11 GMTCVECVE-2024-23463: Anti-Tampering bypass via Repair App functionalityhttps://agentprime.io/advisories/CVE-2024-23463/https://agentprime.io/advisories/CVE-2024-23463/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 30 Apr 2024 16:17:53 GMTCVECVE-2024-23482: ZScalerService Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2024-23482/https://agentprime.io/advisories/CVE-2024-23482/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Mar 2024 14:23:20 GMTCVECVE-2023-41973: Lack of input santization on Zscaler Client Connector enables arbitrary code executionhttps://agentprime.io/advisories/CVE-2023-41973/https://agentprime.io/advisories/CVE-2023-41973/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Mar 2024 14:19:13 GMTCVECVE-2023-41972: Revert password check incorrect type validationhttps://agentprime.io/advisories/CVE-2023-41972/https://agentprime.io/advisories/CVE-2023-41972/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Mar 2024 14:16:24 GMTCVECVE-2023-41969: ZSATrayManager Arbitrary File Deletionhttps://agentprime.io/advisories/CVE-2023-41969/https://agentprime.io/advisories/CVE-2023-41969/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 Mar 2024 14:14:21 GMTCVECVE-2023-28802: Disable Zscaler using machine tunnel restarthttps://agentprime.io/advisories/CVE-2023-28802/https://agentprime.io/advisories/CVE-2023-28802/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Nov 2023 10:51:50 GMTCVECVE-2023-28794: PAC Files Exposed to Internet Websiteshttps://agentprime.io/advisories/CVE-2023-28794/https://agentprime.io/advisories/CVE-2023-28794/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Nov 2023 07:19:25 GMTCVECVE-2023-28805: ZCC on Linux privilege escalationhttps://agentprime.io/advisories/CVE-2023-28805/https://agentprime.io/advisories/CVE-2023-28805/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:33:57 GMTCVECVE-2023-28804: Linux ZCC allows unsigned updates, allowing elevated Code Executionhttps://agentprime.io/advisories/CVE-2023-28804/https://agentprime.io/advisories/CVE-2023-28804/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:33:19 GMTCVECVE-2023-28803: Traffic being bypassed by ZCC by configuring synthetic IP range as local networkhttps://agentprime.io/advisories/CVE-2023-28803/https://agentprime.io/advisories/CVE-2023-28803/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:32:17 GMTCVECVE-2023-28797: LPE using arbitrary file delete with Symlinkshttps://agentprime.io/advisories/CVE-2023-28797/https://agentprime.io/advisories/CVE-2023-28797/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:30:38 GMTCVECVE-2023-28796: IPC Bypass Through PLT Section in ELFhttps://agentprime.io/advisories/CVE-2023-28796/https://agentprime.io/advisories/CVE-2023-28796/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:28:15 GMTCVECVE-2023-28795: Client IPC validation bypasshttps://agentprime.io/advisories/CVE-2023-28795/https://agentprime.io/advisories/CVE-2023-28795/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:27:24 GMTCVECVE-2023-28793: Heap Based Buffer Overflow in Libraryhttps://agentprime.io/advisories/CVE-2023-28793/https://agentprime.io/advisories/CVE-2023-28793/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:26:08 GMTCVECVE-2021-26738: Privilege Escalation for ZCC macOS via PATH Variablehttps://agentprime.io/advisories/CVE-2021-26738/https://agentprime.io/advisories/CVE-2021-26738/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:24:49 GMTCVECVE-2021-26737: Privilege Escalation Using PID Reuse in ZCC macOShttps://agentprime.io/advisories/CVE-2021-26737/https://agentprime.io/advisories/CVE-2021-26737/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:22:51 GMTCVECVE-2021-26736: ZApp Installer Privilege Escalation Vulnerabilitieshttps://agentprime.io/advisories/CVE-2021-26736/https://agentprime.io/advisories/CVE-2021-26736/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:21:12 GMTCVECVE-2021-26735: Untrusted Search Path While Executing REG DELETE by Uninstallerhttps://agentprime.io/advisories/CVE-2021-26735/https://agentprime.io/advisories/CVE-2021-26735/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:19:35 GMTCVECVE-2021-26734: Junction Delete leading to elevation of privilegehttps://agentprime.io/advisories/CVE-2021-26734/https://agentprime.io/advisories/CVE-2021-26734/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 23 Oct 2023 13:18:36 GMTCVECVE-2023-28800: Output encoding missing in redrurl parameterhttps://agentprime.io/advisories/CVE-2023-28800/https://agentprime.io/advisories/CVE-2023-28800/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jun 2023 19:15:55 GMTCVECVE-2023-28799: A URL parameter during login flow was vulnerable to injection.https://agentprime.io/advisories/CVE-2023-28799/https://agentprime.io/advisories/CVE-2023-28799/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Jun 2023 19:06:24 GMTCVE