Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2021-26736

ZApp Installer Privilege Escalation Vulnerabilities

Description

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed execution of binaries from a low privileged path. A local adversary may be able to execute code with SYSTEM privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zscaler Client Connector

Default version status: unaffected

  • 0 to < 3.6affected

References