Skip to content
OpenAdvisories
Medium · 6.7 CVE-2021-26736 EUVD-2021-13523GHSA-cmfg-v75g-8wm3

ZApp Installer Privilege Escalation Vulnerabilities

Published Oct 23, 2023 · Updated Feb 27, 2025 · Assigned by Zscaler

Description

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges.

Affected products

VendorProductAffectedFixed
Zscaler Client Connector < 3.6 3.6

Advisories 1

References