{"metadata": {"vulnerability": "CVE-2025-0120", "count": 37, "kinds": {"milestone": 7, "sighting": 13, "kev": 0, "other": 17}}, "data": [{"timestamp": "2024-12-20T23:23:21.499Z", "date_only": false, "value": "2024-12-20T23:23:21.499Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-0120", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-09T00:00:00Z", "date_only": true, "value": "2025-04-09", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0301", "record": "CERTFR-2025-AVI-0301", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-04-09T14:00:00Z", "date_only": false, "value": "2025-04-09T14:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://security.paloaltonetworks.com/CVE-2025-0120", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "cb156361-9b06-49e8-a36d-26f702b63d68", "url": "https://security.paloaltonetworks.com/CVE-2025-0120"}, {"timestamp": "2025-04-09T16:00:00Z", "date_only": false, "value": "2025-04-09T16:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0120", "field": "containers.cna.datePublic"}, {"timestamp": "2025-04-09T16:00:00Z", "date_only": false, "value": "2025-04-09T16:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0120", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2025-04-09T22:00:00Z", "date_only": false, "value": "2025-04-09T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0779", "record": "WID-SEC-W-2025-0779", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-04-09T22:00:00Z", "date_only": false, "value": "2025-04-09T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0779", "record": "WID-SEC-W-2025-0779", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-04-09T22:00:00Z", "date_only": false, "value": "2025-04-09T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0779", "record": "WID-SEC-W-2025-0779", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-04-09T22:00:00Z", "date_only": false, "value": "2025-04-09T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0779", "record": "WID-SEC-W-2025-0779", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0301", "record": "CERTFR-2025-AVI-0301", "field": "last_revision_date"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0301", "record": "CERTFR-2025-AVI-0301", "field": "initial_release_date"}, {"timestamp": "2025-04-10T00:00:00Z", "date_only": false, "value": "2025-04-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0301", "record": "CERTFR-2025-AVI-0301", "field": "revisions.0.revision_date"}, {"timestamp": "2025-04-10T09:15:00.460Z", "date_only": false, "value": "2025-04-10T09:15:00.460+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-0779", "record": "WID-SEC-W-2025-0779", "field": "document.tracking.generator.date"}, {"timestamp": "2025-04-11T01:44:48.253Z", "date_only": false, "value": "2025-04-11T01:44:48.253Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-0120", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-11T02:15:18Z", "date_only": false, "value": "2025-04-11T02:15:18Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GG8Q-GXM4-V22C", "record": "GHSA-GG8Q-GXM4-V22C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-11T02:15:18.197Z", "date_only": false, "value": "2025-04-11T02:15:18.197", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0120", "record": "FKIE_CVE-2025-0120", "field": "published"}, {"timestamp": "2025-04-11T04:19:26Z", "date_only": false, "value": "2025-04-11T04:19:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GG8Q-GXM4-V22C", "record": "GHSA-GG8Q-GXM4-V22C", "field": "published"}, {"timestamp": "2025-04-11T05:34:32Z", "date_only": false, "value": "2025-04-11T05:34:32.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/22694", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "59650911-0ec8-4d4c-a44f-fc02f9cf8a61", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0120 - Palo Alto Networks GlobalProtect Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0120 \nPublished : April 11, 2025, 2:15 a.m. | 49\u00a0minutes ago \nDescription : A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/22694"}, {"timestamp": "2025-04-11T07:32:02Z", "date_only": false, "value": "2025-04-11T07:32:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/rqXPMnEckLnklBKkSNUk8xIPJAgwKsVkMSDHWe6zELgBADE", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "4171fe61-8471-4b9a-b298-4ee5ae27b762"}, {"timestamp": "2025-04-11T07:32:03Z", "date_only": false, "value": "2025-04-11T07:32:03.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/gZ8H_4DJdO0gV9D5IlhXI2A-NhtSHTdL4G2WIN6Qkmq8Pqg", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "e9e0b396-bfd2-46c2-8caa-eb8458d8953d"}, {"timestamp": "2025-04-11T13:55:17.622Z", "date_only": false, "value": "2025-04-11T13:55:17.622169Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114319669075311241", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "ae109a56-e8d3-4571-ac30-16550e27885b", "url": "https://infosec.exchange/users/cR0w/statuses/114319669075311241"}, {"timestamp": "2025-04-11T15:47:44.551Z", "date_only": false, "value": "2025-04-11T15:47:44.551607Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0120", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-11T15:47:44.551Z", "date_only": false, "value": "2025-04-11T15:47:44.551607Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0120", "record": "FKIE_CVE-2025-0120", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-11T16:02:44.112Z", "date_only": false, "value": "2025-04-11T16:02:44.112Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-0120", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-11T23:03:19.500Z", "date_only": false, "value": "2025-04-11T23:03:19.500758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lml4uomnk622", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "9e4db830-84e3-4546-a899-43f1ebdead98", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lml4uomnk622"}, {"timestamp": "2025-04-21T19:03:20.373Z", "date_only": false, "value": "2025-04-21T19:03:20.373888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lndu4r7wdf2y", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "e554c678-0125-474e-997b-241f930868bf", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lndu4r7wdf2y"}, {"timestamp": "2025-05-01T17:28:39.109Z", "date_only": false, "value": "2025-05-01T17:28:39.109587Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114433754299298936", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "a3b4deee-ae57-40fc-80e0-d4f2839fd1e5", "url": "https://infosec.exchange/users/cR0w/statuses/114433754299298936"}, {"timestamp": "2025-05-01T19:03:20.220Z", "date_only": false, "value": "2025-05-01T19:03:20.220867Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo4yrxlidi2t", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "598109a3-c194-4107-b2bc-98091f03b6b0", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo4yrxlidi2t"}, {"timestamp": "2025-05-01T19:06:49.487Z", "date_only": false, "value": "2025-05-01T19:06:49.487494Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aakl.bsky.social/post/3lo4yy6oajc2b", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "776e11e4-84eb-4ff1-bb0f-fd9d5699cec4", "url": "https://bsky.app/profile/aakl.bsky.social/post/3lo4yy6oajc2b"}, {"timestamp": "2025-05-02T19:00:00Z", "date_only": false, "value": "2025-05-02T19:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0120", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2025-05-02T19:03:22.464Z", "date_only": false, "value": "2025-05-02T19:03:22.464230Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo7jax6rnz2p", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "ed038eba-1d16-48c4-958c-7299cecaa464", "url": "https://bsky.app/profile/ripjyr.bsky.social/post/3lo7jax6rnz2p"}, {"timestamp": "2025-05-02T19:08:27.987Z", "date_only": false, "value": "2025-05-02T19:08:27.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-0120", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-02T19:08:27.987Z", "date_only": false, "value": "2025-05-02T19:08:27.987Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / palo_alto", "record": "CVE-2025-0120", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-02T19:16:06Z", "date_only": false, "value": "2025-05-02T19:16:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14561", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "5b718e18-6b81-4221-a835-ae01fcbd49b4", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0120\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.\n\ud83d\udccf Published: 2025-04-11T01:44:48.253Z\n\ud83d\udccf Modified: 2025-05-02T19:08:27.987Z\n\ud83d\udd17 References:\n1. https://security.paloaltonetworks.com/CVE-2025-0120", "url": "https://t.me/DarkWebInformer_CVEAlerts/14561"}, {"timestamp": "2025-06-27T18:30:37Z", "date_only": false, "value": "2025-06-27T18:30:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GG8Q-GXM4-V22C", "record": "GHSA-GG8Q-GXM4-V22C", "field": "modified"}, {"timestamp": "2025-10-24T07:06:59.276Z", "date_only": false, "value": "2025-10-24T07:06:59.276539Z", "kind": "sighting", "label": "Seen", "source": "https://pretalx.com/hack-lu-2025/talk/XDHVWE/", "record": "CVE-2025-0120", "field": "creation_timestamp", "uuid": "7ffe7e96-cfbb-4e94-a6d0-09deb85543f5", "url": "https://pretalx.com/hack-lu-2025/talk/XDHVWE/"}, {"timestamp": "2026-06-17T08:25:53.387Z", "date_only": false, "value": "2026-06-17T08:25:53.387", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-0120", "record": "FKIE_CVE-2025-0120", "field": "lastModified"}]}