CVEs we hold for Zscaler
Records whose assigning authority named Zscaler as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-59569Android ZCC VPN API method privilege escalationZscaler Client Connector CVE-2026-59565Local and kernel denial-of-serviceZscaler Client Connector CVE-2026-59564Authentication bypass between ZCC and client connector portalZscaler Client Connector CVE-2026-25687ZCC race condition in ZPA tunnel handlerZscaler Client Connector CVE-2026-25684File Type Control rule bypassZscaler ZIA File Type Control CVE-2026-22569Incorrect startup configuration in ZCCZscaler Client Connector CVE-2026-22568Unauthorized information retrieval in ZIA Admin UIZscaler ZIA Admin UI CVE-2025-54983Health check port on ZCC allows tunnel bypassZscaler Client Connector CVE-2025-54982SAML 2.0 Public Key Validation IssueZscaler Authentication Server CVE-2024-31127MacOS Zscaler Client Connector Local Privilege EscalationZscaler Client Connector CVE-2024-23483Local Privilege Escalation via lack of input validationZscaler Client Connector CVE-2024-23482ZScalerService Local Privilege EscalationZscaler Client Connector CVE-2024-23480Insecure MacOS code sign check fallbackZscaler Client Connector CVE-2024-23464Zscaler bypass with administrative privileges on WindowsZscaler Client Connector CVE-2024-23463Anti-Tampering bypass via Repair App functionalityZscaler Client Connector CVE-2024-23462ZCC Mac validinstaller file integrity check missingZscaler Client Connector CVE-2024-23460Incorrect signature validation of packageZscaler Client Connector CVE-2024-23459Multiple Arbitrary Creates/Overwrites by link followingZscaler Client Connector CVE-2024-23458Local Privilege Escalation on Zscaler Client Connector on WindowsZscaler Client Connector CVE-2024-23457Anti-tampering can be disabled with uninstall password enforcedZscaler Client Connector CVE-2024-23456Signature validation issue leads to Anti-Tampering bypassZscaler Client Connector CVE-2023-41973Lack of input santization on Zscaler Client Connector enables arbitrary code executionZscaler Client Connector CVE-2023-41972Revert password check incorrect type validationZscaler Client Connector CVE-2023-41971Windows ZCC Upgrade DoS And Privilege Escalation Through RPC ControlZscaler Client Connector CVE-2023-41970Repair App local code execution with arbitrary privilegesZscaler Client Connector CVE-2023-41969ZSATrayManager Arbitrary File DeletionZscaler Client Connector CVE-2023-28807Bypass of ZIA domain fronting detection module through evasion techniqueZscaler ZIA CVE-2023-28806Signature validation error in DLL allows disabling anti-tampering protectionZscaler Client Connector CVE-2023-28805ZCC on Linux privilege escalationZscaler Client Connector CVE-2023-28804Linux ZCC allows unsigned updates, allowing elevated Code ExecutionZscaler Client Connector CVE-2023-28803Traffic being bypassed by ZCC by configuring synthetic IP range as local networkZscaler Client Connector CVE-2023-28802Disable Zscaler using machine tunnel restartZscaler Client Connector CVE-2023-28801Improper SAML signature verificationZscaler ZIA Admin Portal CVE-2023-28800Output encoding missing in redrurl parameterZscaler Client Connector CVE-2023-28798Out-of-bounds write to heap in pacparserZscaler Client Connector CVE-2023-28797LPE using arbitrary file delete with SymlinksZscaler Client Connector CVE-2023-28796IPC Bypass Through PLT Section in ELFZscaler Client Connector CVE-2023-28794PAC Files Exposed to Internet WebsitesZscaler Client Connector CVE-2023-28793Heap Based Buffer Overflow in LibraryZscaler Client Connector CVE-2021-26738Privilege Escalation for ZCC macOS via PATH VariableZscaler Client Connector CVE-2021-26737Privilege Escalation Using PID Reuse in ZCC macOSZscaler Client Connector CVE-2021-26736ZApp Installer Privilege Escalation VulnerabilitiesZscaler Client Connector CVE-2021-26735Untrusted Search Path While Executing REG DELETE by UninstallerZscaler Client Connector CVE-2021-26734Junction Delete leading to elevation of privilegeZscaler Client Connector 53 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.