Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-26735

Untrusted Search Path While Executing REG DELETE by Uninstaller

Description

The Zscaler Client Connector Installer and Unsintallers for Windows prior to 3.6 had an unquoted search path vulnerability. A local adversary may be able to execute code with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 3.6affected

References