← All advisories

Medium severity6.5NVD Advisory· Published May 2, 2024· Updated Jun 17, 2026

CVE-2023-28798

CVE-2023-28798

Description

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution.

Affected products

3

Zscaler/Client Connector3 versions
cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:macos:*:*+ 2 more
- cpe:2.3:a:zscaler:client_connector:*:*:*:*:*:macos:*:*range: <3.7
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

help.zscaler.com/client-connector/client-connector-app-release-summary-2022nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.