Client Connector

DHCP routing options can manipulate interface-based VPN traffic

also in 7 other products

Zscaler Client Connector: Stack-Based Buffer Overflow

Remote Code Execution

Authentication bypass between ZCC and client connector portal

Local and kernel denial-of-service

ZCC race condition in ZPA tunnel handler

Local privilege escalation

Android ZCC VPN API method privilege escalation

Local denial-of-service

Local Privilege Escalation via lack of input validation

Android ZCC denial of service

Output encoding missing in redrurl parameter

Anti-Tampering bypass via Repair App functionality

Zscaler Client Connector: Improper Validation of Specified Type of Input

Multiple Arbitrary Creates/Overwrites by link following

Zscaler bypass with administrative privileges on Windows

Zscaler Client Connector: Code Execution

Zscaler Client Connector for Windows: security vulnerability

Out-of-bounds write to heap in pacparser

Linux ZCC allows unsigned updates, allowing elevated Code Execution

Heap Based Buffer Overflow in Library

Insecure MacOS code sign check fallback

Signature validation issue leads to Anti-Tampering bypass

Lack of input santization on Zscaler Client Connector enables arbitrary code execution

MacOS Zscaler Client Connector Local Privilege Escalation