EUVD-2026-64882
GHSA-j5x2-m45x-3cp3
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description confirms DoS only; no confidentiality or integrity impact independently verifiable, so C and I set to N.
Primary rating from Vendor (Zscaler).
CVSS VectorVendor: Zscaler
Lifecycle Timeline
2DescriptionCVE.org
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on affected versions of Zscaler Client Connector on Android and ChromeOS.
AnalysisAI
Buffer overflow in Zscaler Client Connector on Android and ChromeOS allows local exploitation to trigger a denial-of-service condition against the connector process. The CVSS vector (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) assigns High confidentiality and integrity impact, creating a notable discrepancy with the vendor description, which characterizes impact as DoS only - this gap suggests the vulnerability may carry latent code-execution potential that the description does not fully disclose. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local code execution on the target Android or ChromeOS device - the attacker must be able to run code in the same operating environment as the Zscaler Client Connector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The raw CVSS score of 8.4 overstates realistic impact relative to what the description confirms: vendor language describes local DoS only, yet the vector carries C:H/I:H/A:H, implying full compromise potential. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to apply the updated Zscaler Client Connector version identified in the vendor release summary at https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Android and ChromeOS deployments running Zscaler Client Connector and document versions in use to quantify organizational risk exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Client Connector
View allDHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection.2. Rated cri
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allow
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution.2. Rated critical severity (CVSS
An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation.4.0.105. Rat
Remote code execution in Zscaler Client Connector (ZCC) lets a remote, unauthenticated attacker run arbitrary code withi
Authentication bypass in Zscaler Client Connector allows remote unauthenticated attackers to subvert the trust between t
Remote buffer overflow in Zscaler Client Connector on Windows enables a network-accessible attacker with low privileges
Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arb
Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repa
The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrar
While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks,
Same weakness CWE-229 – Improper Handling of Values
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today