Arbitrary Code Execution Vulnerability in Zscaler Client Connector for Mac

CVE-2023-28798

What is CVE-2023-28798?

An out-of-bounds write vulnerability exists in the pacparser library utilized by Zscaler Client Connector on macOS. This flaw may allow an attacker to execute arbitrary code, potentially compromising the integrity and security of affected systems. Users of Zscaler Client Connector should ensure their software is up to date to mitigate the risk associated with this vulnerability.

References