CVE-2026-59565
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on Zscaler Client Connector on Windows.
Risk Assessment
A remote attacker can cause system or kernel crashes, potentially leading to service unavailability and potential system integrity compromise.
Recommendation
Update Zscaler Client Connector on Windows to the latest patched version. Limit network exposure of devices.
Other vulnerabilities in Zscaler Client Connector
See all- CVE-2026-59568Critical
Multiple vulnerabilities on affected versions of Zscaler Client Connector allow remote code execution, giving an unauthenticated, unprivileged user the ability to execute arbitrary code in the ZCC context.
- CVE-2026-59564Critical
An authentication bypass issue exists in communications between affected versions of the Zscaler Client Connector and the Zscaler Client Connector Portal.
- CVE-2026-59567High
Multiple vulnerabilities in Zscaler Client Connector allow local privilege escalation, giving an unprivileged user the ability to execute arbitrary code in a privileged context.
- CVE-2026-59566High
A locally exploitable buffer overflow bug can cause a local denial-of-service attack on Zscaler Client Connector on Android and ChromeOS.
- CVE-2026-22569Medium
An incorrect startup configuration of Zscaler Client Connector on Windows may cause a limited amount of traffic to bypass inspection under rare circumstances.
Original NVD description (English source)
A remotely exploitable buffer overflow bug can cause a local and kernel denial-of-service attack on affected versions of Zscaler Client Connector on Windows.