EUVD-2026-64881
GHSA-c34f-p2fw-3mjr
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Kernel-level DoS warrants S:C; description confirms only availability impact so C:N/I:N; PR:L per vendor CVSS; AV:N confirmed by 'remotely exploitable'.
Primary rating from Vendor (Zscaler).
CVSS VectorVendor: Zscaler
Lifecycle Timeline
2DescriptionCVE.org
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.
AnalysisAI
Remote buffer overflow in Zscaler Client Connector on Windows enables a network-accessible attacker with low privileges to crash the local system at the kernel level, producing a denial-of-service condition. The provided CVSS vector (C:H/I:H/A:H) signals potential confidentiality and integrity impact beyond what the vendor description explicitly states, a discrepancy that warrants verification - kernel-level buffer overflows frequently allow code execution, not merely DoS. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The CVSS vector specifies PR:L (low privilege required), meaning the attacker must possess some form of authenticated or credentialed access - such as a valid user account on the network or an authenticated session - rather than being a fully unauthenticated external party. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) classifies this as a high-severity remotely exploitable vulnerability requiring only low privilege, yet several signals warrant scrutiny. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | The primary remediation is to upgrade Zscaler Client Connector on Windows to the version identified as fixed in the vendor's 2026 release summary at https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2026; an exact patched version number was not independently confirmed from available data and must be verified there. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Identify and catalog all Windows systems running Zscaler Client Connector, review current logging and monitoring for suspicious RPC or network behavior targeting this component, and brief incident response on potential exploitation indicators. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Client Connector
View allDHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7
An Improper Input Validation vulnerability in Zscaler Client Connector on MacOS allows OS Command Injection.2. Rated cri
An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allow
A fallback mechanism in code sign checking on macOS may allow arbitrary code execution.2. Rated critical severity (CVSS
An Improper Input Validation vulnerability in Zscaler Client Connector on Linux allows Privilege Escalation.4.0.105. Rat
Remote code execution in Zscaler Client Connector (ZCC) lets a remote, unauthenticated attacker run arbitrary code withi
Authentication bypass in Zscaler Client Connector allows remote unauthenticated attackers to subvert the trust between t
Local privilege escalation in Zscaler Client Connector enables a standard (non-administrative) local user to execute arb
Buffer overflow in Zscaler Client Connector on Android and ChromeOS allows local exploitation to trigger a denial-of-ser
Improper input validation in Zscaler Client Connector for Android and ChromeOS (builds prior to 4.2.0.152) lets an attac
We need to produce a JSON object with the specified fields. Let me synthesize. CVE-2026-25687: race condition in ZPA tu
Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repa
Same weakness CWE-229 – Improper Handling of Values
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today