AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

ZscalerCVE-2026-59565

Zscaler Client Connector: buffer overflow

Zscaler

CVE-2026-59565 · Published Aug 24, 2026 · updated Aug 28, 2026

High8.8
Fix: upgrade to Windows: 4.6.0.457 or later (4 fixed versions below)
Zscaler advisory

A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.

Affected versions

PackageAffectedFixed in
Client Connector
Product
< Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372Windows: 4.6.0.457, 4.7.0.317, 4.8.0.232, 4.9.0.372
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-229

More Zscaler advisories

All Zscaler
High 7.5Sep 14Zscaler Client Connector: improper input validationCVE-2026-59570fixed in Android: 4.2.0.152 +1High 8.1Sep 14Zscaler Client Connector: race conditionCVE-2026-25687fixed in 4.6.0.486 +3High 8.8Aug 24Zscaler Client Connector: privilege escalationCVE-2026-59567fixed in Windows: 4.6.0.457 +8Critical 9.1Aug 24Zscaler Client Connector: remote code executionCVE-2026-59568fixed in Windows: 4.6.0.457 +8Critical 9.1Aug 24Zscaler Client Connector: authentication bypassCVE-2026-59564fixed in Windows: 4.6.0.457 +7High 8.4Aug 24Zscaler Client Connector: buffer overflowCVE-2026-59566fixed in Android: 4.2 +1