Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2026-0299 (GCVE-0-2026-0299)

Vulnerability from nvd – Published: 2026-08-13 02:04 – Updated: 2026-08-13 13:21

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0299	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0299",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:52.857599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:21:02.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:04:07.275Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003cbr\u003e \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;\u003cspan\u003e(6.3.3-1121) \u003c/span\u003e or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 \u003cspan\u003e(6.3.3-1121) \u003c/span\u003eor later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13  (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0299",
    "datePublished": "2026-08-13T02:04:07.275Z",
    "dateReserved": "2025-11-03T20:44:57.175Z",
    "dateUpdated": "2026-08-13T13:21:02.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0298 (GCVE-0-2026-0298)

Vulnerability from nvd – Published: 2026-08-13 02:02 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Summary

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0298	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0298",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:53.877148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:48.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to devices configured to use SAML authentication in the GlobalProtect\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e feature.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is applicable only to devices configured to use SAML authentication in the GlobalProtect Connect Before Logon (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) feature."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:macos:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
            }
          ],
          "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:02:47.196Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App All on macOS                                 No action needed.\nGlobalProtect App All on Linux                                 No action needed.\nGlobalProtect App All on iOS                                   No action needed.\nGlobalProtect App All on Android                               No action needed.\nGlobalProtect App All on Chrome OS                             No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eCustomers can mitigate the risk of this issue by taking either of the following actions:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon (CBL\u003c/span\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003e)\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003ewithout SAML Authentication\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon\"\u003e\u003cspan\u003ePre-logon with machine certificate\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003einstead of Connect Before Logon (CBL).\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n 1. Use Connect Before Logon (CBL (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method)) (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) without SAML Authentication\n\n 2. Use Pre-logon with machine certificate (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon) instead of Connect Before Logon (CBL)."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.226Z",
      "x_cpeManuallyEdited": true,
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0298",
    "datePublished": "2026-08-13T02:02:47.196Z",
    "dateReserved": "2025-11-03T20:44:56.118Z",
    "dateUpdated": "2026-08-13T13:20:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0297 (GCVE-0-2026-0297)

Vulnerability from nvd – Published: 2026-08-13 02:01 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0297	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.5 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0297",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:54.896353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:35.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.5",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux). \u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:01:13.682Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                                 MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux      6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS          6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS          6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows        6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows        6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later. \nGlobalProtect App 6.3/6.1 on iOS        6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on iOS            6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on Android    6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on Android        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on ChromeOS   6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on ChromeOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking either of the following three actions:\u003cbr\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eEnforce SSL-Only VPN Connections:\u0026nbsp;Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.\u0026nbsp;Customer can configure \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app\"\u003eConnect with SSL Only\u003c/a\u003e tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u0026gt; Portal \u0026gt; Agent Configuration\u0026gt;  Advanced Control for Tunnel Mode Behavior\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCustomers can configure SSL only tunnel protocol by un-checking \u0027\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab\"\u003eEnable IPSec\u003c/a\u003e\u0027  on GlobalProtect gateway at\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGateway\u003c/b\u003e\u003cb\u003e \u003c/b\u003e\u0026gt;\u003cb\u003e \u003c/b\u003e\u003cb\u003eAgent \u003c/b\u003e\u0026gt; \u003cb\u003eTunnel Setting\u003c/b\u003e \u0026gt; \u003cb\u003eEnable IPSec\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cb\u003eWorkaround\u0026nbsp; for new and existing GlobalProtect app \u0026gt;= 6.2.8 or GlobalProtect app \u0026gt;= 6.3.3 installations on Windows and macOS\u003c/b\u003e \u003cbr\u003eGlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect\"\u003eEnable Strict Certificate Check\u003c/a\u003e which enables certificate checks required to mitigate this issue on Windows and macOS.\u003cbr\u003e\u003cbr\u003eThis configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u0026lt; 6.2.8.\u003cbr\u003eThis configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eWorkaround for new and existing GlobalProtect app \u0026lt; 6.2.8 or GlobalProtect app \u0026lt; 6.3.3 installations on macOS\u003c/b\u003e\u003cbr\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist\"\u003eUse Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file\u003c/a\u003e\u0026nbsp;in /Library/Preferences.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAdd a \"Settings\" section if it does not exist within the GlobalProtect section.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWithin the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u0026nbsp;Restart macOS.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003ctt\u003e\u003ctt\u003e\u2003\u0026lt;key\u0026gt;GlobalProtect\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u2003\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp; (removed for brevity)\u003c/tt\u003e\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp;\u2003 \u0026lt;key\u0026gt;Settings\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp;\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;key\u0026gt;full-chain-cert-verify\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;string\u0026gt;yes\u0026lt;/string\u0026gt;\u003cbr\u003e\u003c/tt\u003e\u0026nbsp; \u0026nbsp;\u2003\u0026lt;/dict\u0026gt;\u003cbr\u003e\u0026lt;/dict\u0026gt;\u003c/tt\u003e\u003c/li\u003e\u003c/ol\u003e\u003cb\u003e\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\u003cbr\u003e\u003c/b\u003e\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\u003cbr\u003e\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\u003cbr\u003e\u003ctt\u003e\u2003\u2003\u2003\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;GlobalProtect\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;Settings\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;full-chain-cert-verify\u0026gt;yes\u0026lt;/full-chain-cert-verify\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/Settings\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/GlobalProtect\u0026gt;\u003c/tt\u003e\u003cp\u003e\u003cbr\u003e\u003cb\u003e\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\u003c/b\u003e\u003cbr\u003e\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\".\u003c/p\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following three actions:\n\n\n 1. Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode. Customer can configure Connect with SSL Only (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app) tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u003e Portal \u003e Agent Configuration\u003e Advanced Control for Tunnel Mode Behavior\n\n 2. Customers can configure SSL only tunnel protocol by un-checking \u0027Enable IPSec (https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab)\u0027 on GlobalProtect gateway at Network \u003e Gateway \u003e Agent \u003e Tunnel Setting \u003e Enable IPSec\n\n 3. Workaround  for new and existing GlobalProtect app \u003e= 6.2.8 or GlobalProtect app \u003e= 6.3.3 installations on Windows and macOS\n    GlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration Enable Strict Certificate Check (https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect) which enables certificate checks required to mitigate this issue on Windows and macOS.\n    \n    This configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u003c 6.2.8.\n    This configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\n    \n    Workaround for new and existing GlobalProtect app \u003c 6.2.8 or GlobalProtect app \u003c 6.3.3 installations on macOS\n    \n    \n    1. Use Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist) in /Library/Preferences.\n    \n    2. Add a \"Settings\" section if it does not exist within the GlobalProtect section.\n    \n    3. Within the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\n    \n    4.  Restart macOS.\n    \u2003\u003ckey\u003eGlobalProtect\u003c/key\u003e\n    \u2003\u003cdict\u003e\n      \u2003  (removed for brevity)\n       \u2003 \u003ckey\u003eSettings\u003c/key\u003e\n      \u2003 \u003cdict\u003e\n         \u2003   \u003ckey\u003efull-chain-cert-verify\u003c/key\u003e\n         \u2003   \u003cstring\u003eyes\u003c/string\u003e\n       \u2003\u003c/dict\u003e\n    \u003c/dict\u003e\n\n\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\n\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\n\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\n\u2003\u2003\u2003\n\u2003\u2003\u2003\u2003\u2003\u2003\u003cGlobalProtect\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cSettings\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cfull-chain-cert-verify\u003eyes\u003c/full-chain-cert-verify\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003c/Settings\n\u2003\u2003\u2003\u2003\u2003\u2003\u003c/GlobalProtect\u003e\n\n\n\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\n\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\n\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\"."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.171Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0297",
    "datePublished": "2026-08-13T02:01:13.682Z",
    "dateReserved": "2025-11-03T20:44:54.801Z",
    "dateUpdated": "2026-08-13T13:20:35.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0296 (GCVE-0-2026-0296)

Vulnerability from nvd – Published: 2026-08-13 01:59 – Updated: 2026-08-13 13:29

Title

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Summary

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

4.5 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:29 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0296	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:29:34.520951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:46.735Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cspan\u003eImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Man in the Middle Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:59:45.972Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\n  \u003cthead\u003e\n    \u003ctr\u003e\n      \u003cth\u003eVersion\u003c/th\u003e\n      \u003cth\u003eMinor Version\u003c/th\u003e\n      \u003cth\u003eSuggested Solution\u003c/th\u003e\n    \u003c/tr\u003e\n  \u003c/thead\u003e\n  \u003ctbody\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n  \u003c/tbody\u003e\n\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0296",
    "datePublished": "2026-08-13T01:59:45.972Z",
    "dateReserved": "2025-11-03T20:44:53.961Z",
    "dateUpdated": "2026-08-13T13:29:46.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0295 (GCVE-0-2026-0295)

Vulnerability from nvd – Published: 2026-08-13 01:57 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Summary

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Severity

4.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0295	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (6.3.3-1121) (custom) Affected: 6.2.0 , < 6.2.8-h13 (6.2.8-1045) (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Alex Bourla and Graham Brereton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:55.918274Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:22.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14 (6.3.3-1121)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13 (6.2.8-1045)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14_6.3.3-1121_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13_6.2.8-1045_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:windows:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla and Graham Brereton"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-29",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:57:22.394Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;GlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                           MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS    6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS    6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\n GlobalProtect App 6.0 on macOS   6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on Linux                                  No action needed.\nGlobalProtect App on Windows                                No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation via Race Condition on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue.\u0026nbsp;"
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.042Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0295",
    "datePublished": "2026-08-13T01:57:22.394Z",
    "dateReserved": "2025-11-03T20:44:53.142Z",
    "dateUpdated": "2026-08-13T13:20:22.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0267 (GCVE-0-2026-0267)

Vulnerability from nvd – Published: 2026-06-10 20:31 – Updated: 2026-06-11 14:41

Title

GlobalProtect App: Information Exposure Vulnerability on macOS

Summary

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Severity

4.4 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 14:41 UTC

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

palo_alto mitre root

References

2 references

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0267	vendor-advisory
https://security.paloaltonetworks.com/CVE-2024-8687	related

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2026-06-10 16:00

Credits

Palo Alto Networks thanks one of our customers for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T14:41:13.659641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T14:41:21.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\u003cbr\u003e\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow with Password\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\n\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Allow with Password"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h1",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h2",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks one of our customers for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-06-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
            }
          ],
          "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-155",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-155 Screen Temporary Files for Sensitive Information"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T20:31:37.320Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0267"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-8687"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h1 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                          MINOR VERSION RANGE      SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS   6.3.0 through 6.3.3      Upgrade to 6.3.3-h1 or later.\nGlobalProtect App 6.2 on macOS   6.2.0 through 6.2.8-h1   Upgrade to 6.2.8-h2 or later.\nGlobalProtect App on Windows                              Not Applicable\nGlobalProtect App on Linux                                Not Applicable\nGlobalProtect App on iOS                                  Not Applicable\nGlobalProtect App on Android                              Not Applicable\nGlobalProtect App on Chrome OS                            Not Applicable"
        }
      ],
      "source": {
        "discovery": "USER"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "GlobalProtect App: Information Exposure Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u0026nbsp;\u0026gt; Disallow\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Disallow"
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0267",
    "datePublished": "2026-06-10T20:31:37.320Z",
    "dateReserved": "2025-11-03T20:44:27.401Z",
    "dateUpdated": "2026-06-11T14:41:21.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0251 (GCVE-0-2026-0251)

Vulnerability from nvd – Published: 2026-05-13 18:20 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0251	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	Global Protect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:34.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS",
            "iOS",
            "UWP"
          ],
          "product": "Global Protect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.3.3-h2_(6.3.3-42)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:20:01.156Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0251"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.0 on Windows   6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on Windows   6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on Windows   6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on macOS     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on macOS     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on macOS     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on Linux     6.0.0 through 6.0.10     Upgrade to 6.0.11 or later\nGlobalProtect App 6.2 on Linux     6.2.0 through 6.2.9      Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on Linux     6.3.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on UWP                                    No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0251",
    "datePublished": "2026-05-13T18:20:01.156Z",
    "dateReserved": "2025-11-03T20:44:11.930Z",
    "dateUpdated": "2026-05-14T03:56:34.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0250 (GCVE-0-2026-0250)

Vulnerability from nvd – Published: 2026-05-13 18:26 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0250	vendor-advisory

Impacted products

7 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.1 , < 6.1.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.14 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect UWP App	Affected: 6.3 , < 6.3.3-h10 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:::windows:::::*
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:37.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h10",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h2_6.3.3-42_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h10",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\u003c/p\u003e\u003cp\u003eThe GlobalProtect app on iOS is not affected.\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\n\n\n\nThe GlobalProtect app on iOS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of this issue.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:26:51.927Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0250"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2/6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.3-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h10 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.10     Upgrade to 6.0.11 or later. \nGlobalProtect App 6.2/6.3 on Linux   6.2.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on ChromeOS    6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on ChromeOS    6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect UWP App                6.1.0 through 6.3.3-h9   Upgrade to 6.3.3-h10 or later.\nGlobalProtect App on iOS                                      No action needed"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0250",
    "datePublished": "2026-05-13T18:26:51.927Z",
    "dateReserved": "2025-11-03T20:44:11.022Z",
    "dateUpdated": "2026-05-14T03:56:37.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0249 (GCVE-0-2026-0249)

Vulnerability from nvd – Published: 2026-05-13 18:32 – Updated: 2026-05-15 09:57

Title

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Summary

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

Severity

4.9 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 03:56 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0249	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.13 (custom) Affected: 6.0.0 , < 6.0.14 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.0.0 , < 6.0.13 (custom)
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0249",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T03:56:08.016080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T09:57:30.206Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Windows UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an \u003ca href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings\"\u003eembedded browser is enabled\u003c/a\u003e. No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "The issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an embedded browser is enabled (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings). No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\n\nThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Adversary in the Middle (AiTM)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:32:12.091Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0249"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version                              Minor Version            Suggested Solution\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on Chrome OS   6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Chrome OS   6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App on Windows                                  No action needed.\nGlobalProtect App on Linux                                    No action needed.\nGlobalProtect App on iOS                                      No action needed.\nGlobalProtect App on UWP                                      No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Certificate Validation Bypass Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0249",
    "datePublished": "2026-05-13T18:32:12.091Z",
    "dateReserved": "2025-11-03T20:44:09.928Z",
    "dateUpdated": "2026-05-15T09:57:30.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-4227 (GCVE-0-2025-4227)

Vulnerability from nvd – Published: 2025-06-13 05:50 – Updated: 2025-06-23 16:06

Title

GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

Summary

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows certain packets to remain unencrypted instead of being properly secured within the tunnel. An attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute.

Severity

1 (Low)


                        
                          CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Green

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-13 18:50 UTC

CWE

CWE-319 - Cleartext Transmission of Sensitive Information

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-4227	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.2-566 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All , < 11.2.7 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::UWP::

Date Public

2025-06-11 16:00

Credits

Tan Cheng Ghee of OCBC Bank

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-4227",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-13T18:50:08.392375Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-23T16:06:55.397Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                },
                {
                  "at": "6.3.2-566",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.2-566",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:UWP:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Android",
            "iOS",
            "Chrome OS",
            "UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "11.2.7",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue affects Windows and macOS endpoints with \"Endpoint Traffic Policy Enforcement\" enabled. To verify if you have Endpoint Traffic Policy Enforcement enabled:\u003cbr\u003e\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Endpoint Traffic Policy Enforcement \u003cb\u003e\u0026gt;\u003c/b\u003e (Option not set to: \u201cNo\u201d)\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue affects Windows and macOS endpoints with \"Endpoint Traffic Policy Enforcement\" enabled. To verify if you have Endpoint Traffic Policy Enforcement enabled:\n\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Endpoint Traffic Policy Enforcement \u003e (Option not set to: \u201cNo\u201d)"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tan Cheng Ghee of OCBC Bank"
        }
      ],
      "datePublic": "2025-06-11T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper access control vulnerability in the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement\"\u003eEndpoint Traffic Policy Enforcement\u003c/a\u003e feature of the Palo Alto Networks GlobalProtect\u2122 app allows certain packets to remain unencrypted instead of being properly secured within the tunnel.\u003cbr\u003e\u003cbr\u003eAn attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute.\u0026nbsp;"
            }
          ],
          "value": "An improper access control vulnerability in the  Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement  feature of the Palo Alto Networks GlobalProtect\u2122 app allows certain packets to remain unencrypted instead of being properly secured within the tunnel.\n\nAn attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-117",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-117: Interception"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "PHYSICAL",
            "baseScore": 1,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "providerUrgency": "GREEN",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Green",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-319",
              "description": "CWE-319 Cleartext Transmission of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-13T05:50:52.280Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-4227"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "1. Upgrade the GlobalProtect App to one of the unaffected versions:\u003cbr\u003e\u003cbr\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows, macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.3\u003cbr\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eNo solution available. A 6.3.3 hotfix is planned. (ETA: 12 June 2025).\u003cbr\u003eUpgrade to 6.3.2-566 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows, macOS\u003c/td\u003e\u003ctd\u003e6.2.0\u0026nbsp;through 6.2.8-223\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later. A new hotfix for 6.2.8 is planned. (ETA: June 2025).\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows, macOS\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows, macOS\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux, Android, iOS, Chrome OS, UWP\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eNot applicable.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e2. Ensure that \"Endpoint Traffic Policy Enforcement\" is set to \u201cAll Traffic\u201d under the GlobalProtect App Configurations.\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Endpoint Traffic Policy Enforcement (Select: All Traffic)\u003cbr\u003e\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e3. GlobalProtect Portal: Enable \"Allow Gateway Access from GlobalProtect Only\" (Requires Content version 8977 or newer). This must be enabled in conjunction with \"Endpoint Traffic Policy Enforcement\" under the GlobalProtect App Configurations.\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Allow Gateway Access from GlobalProtect Only (Select: Yes)\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e4. Commit your configuration."
            }
          ],
          "value": "1. Upgrade the GlobalProtect App to one of the unaffected versions:\n\nVersion\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on Windows, macOS\n\n                                    6.3.3\n6.3.0 through 6.3.2\n                                    No solution available. A 6.3.3 hotfix is planned. (ETA: 12 June 2025).\nUpgrade to 6.3.2-566 or later.\n                                GlobalProtect App 6.2 on Windows, macOS6.2.0\u00a0through 6.2.8-223Upgrade to 6.3.2-566 or later. A new hotfix for 6.2.8 is planned. (ETA: June 2025).\nGlobalProtect App 6.1 on Windows, macOSAllUpgrade to 6.3.2-566 or later.\nGlobalProtect App 6.0 on Windows, macOSAllUpgrade to 6.3.2-566 or later.\nGlobalProtect App on Linux, Android, iOS, Chrome OS, UWPAllNot applicable.\n2. Ensure that \"Endpoint Traffic Policy Enforcement\" is set to \u201cAll Traffic\u201d under the GlobalProtect App Configurations.\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Endpoint Traffic Policy Enforcement (Select: All Traffic)\n\n\n\n\n3. GlobalProtect Portal: Enable \"Allow Gateway Access from GlobalProtect Only\" (Requires Content version 8977 or newer). This must be enabled in conjunction with \"Endpoint Traffic Policy Enforcement\" under the GlobalProtect App Configurations.\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Allow Gateway Access from GlobalProtect Only (Select: Yes)\n\n\n\n4. Commit your configuration."
        }
      ],
      "source": {
        "defect": [
          "GPC-22460"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-11T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ch3\u003eAvailable Mitigation when solution interferes with\u0026nbsp;Autonomous Digital Experience Management (ADEM)\u003c/h3\u003e\u003cul\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e functionality depends on ICMP probes that must be sent outside of the secure tunnel. When \"Allow Gateway Access from GlobalProtect Only\" is set to \"Yes\" and \"Endpoint Traffic Policy Enforcement\" is configured as \"All Traffic,\" these \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e probes will fail because they are forcefully transmitted through the encrypted tunnel rather than via their required direct path.\u003c/li\u003e\u003cli\u003eThis issue can be addressed by changing \"Endpoint Traffic Policy Enforcement\" to \"All TCP/UDP Traffic.\" This adjustment prevents interception of TCP and UDP traffic while allowing \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e probes to function properly. However, this configuration still permits ICMP, and other non-TCP/UDP traffic to be intercepted.\u0026nbsp;\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Available Mitigation when solution interferes with\u00a0Autonomous Digital Experience Management (ADEM)  *   ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  functionality depends on ICMP probes that must be sent outside of the secure tunnel. When \"Allow Gateway Access from GlobalProtect Only\" is set to \"Yes\" and \"Endpoint Traffic Policy Enforcement\" is configured as \"All Traffic,\" these  ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  probes will fail because they are forcefully transmitted through the encrypted tunnel rather than via their required direct path.\n  *  This issue can be addressed by changing \"Endpoint Traffic Policy Enforcement\" to \"All TCP/UDP Traffic.\" This adjustment prevents interception of TCP and UDP traffic while allowing  ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  probes to function properly. However, this configuration still permits ICMP, and other non-TCP/UDP traffic to be intercepted."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-4227",
    "datePublished": "2025-06-13T05:50:52.280Z",
    "dateReserved": "2025-05-02T19:10:39.630Z",
    "dateUpdated": "2025-06-23T16:06:55.397Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-4232 (GCVE-0-2025-4232)

Vulnerability from nvd – Published: 2025-06-12 23:22 – Updated: 2026-02-26 17:50

Title

GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

Summary

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Severity

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-14 03:56 UTC

CWE

CWE-155 - Improper Neutralization of Wildcards or Matching Symbols

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-4232	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::ChromeOS::

Date Public

2025-06-11 16:00

Credits

Rutger Flohil

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-4232",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-14T03:56:19.829250Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:50:39.870Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:ChromeOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "Android",
            "iOS",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Rutger Flohil"
        }
      ],
      "datePublic": "2025-06-11T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect\u2122 app on macOS allows a non administrative user to escalate their privileges to root.\u003c/p\u003e"
            }
          ],
          "value": "An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect\u2122 app on macOS allows a non administrative user to escalate their privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-155",
              "description": "CWE-155: Improper Neutralization of Wildcards or Matching Symbols",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-12T23:22:34.993Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-4232"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h2\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or\u0026nbsp;6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on macOS\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.3 or later.\n                                GlobalProtect App 6.2 on macOS6.2.0 through 6.2.8-h2Upgrade to 6.2.8-h2 [ETA June 2025] or\u00a06.3.3 or later.GlobalProtect App 6.1 on macOSUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.GlobalProtect App 6.0 on macOSUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.GlobalProtect App on Windows\nNo action needed.GlobalProtect App on Linux\nNo action needed.GlobalProtect App on Android\nNo action needed.GlobalProtect App on iOS\nNo action needed.GlobalProtect App on Chrome OS\u00a0No action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21969"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-11T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect: Authenticated Code Injection Through Wildcard on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo workaround or mitigation is available.\u003c/span\u003e"
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-4232",
    "datePublished": "2025-06-12T23:22:34.993Z",
    "dateReserved": "2025-05-02T19:10:45.457Z",
    "dateUpdated": "2026-02-26T17:50:39.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-0135 (GCVE-0-2025-0135)

Vulnerability from nvd – Published: 2025-05-14 18:08 – Updated: 2025-05-14 20:50

Title

GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-14 20:50 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0135	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-05-14 16:00

Credits

Alex Bourla (alex.bourla@form3.tech) Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T20:50:14.792647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-14T20:50:20.200Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS",
            "Windows",
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be vulnerable to this issue."
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla (alex.bourla@form3.tech)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-05-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app.\n\nThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-578",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-578 Disable Security Software"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-14T18:08:32.924Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0135"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Version\nSuggested Solution\nGlobalProtect App 6.3 on macOS\nUpgrade to 6.3.3 or later\nGlobalProtect App 6.2 on macOS\nUpgrade to 6.2.8 or later\nGlobalProtect App 6.1 on macOS\nUpgrade to 6.2.8 or later or 6.3.3 or later\nGlobalProtect App 6.0 on macOS\nUpgrade to 6.2.8 or later or 6.3.3 or later\nGlobalProtect App on LinuxNot ApplicableGlobalProtect App on WindowsNot ApplicableGlobalProtect App on iOSNot ApplicableGlobalProtect App on AndroidNot ApplicableGlobalProtect UWP AppNot Applicable"
        }
      ],
      "source": {
        "defect": [
          "GPC-21582"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-05-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0135",
    "datePublished": "2025-05-14T18:08:32.924Z",
    "dateReserved": "2024-12-20T23:24:28.176Z",
    "dateUpdated": "2025-05-14T20:50:20.200Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0120 (GCVE-0-2025-0120)

Vulnerability from nvd – Published: 2025-04-11 01:44 – Updated: 2025-05-02 19:08

Title

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Summary

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-11 15:47 UTC

CWE

CWE-250 - Execution with Unnecessary Privileges

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0120	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-04-09 16:00

Credits

Maxime ESCOURBIAC, Michelin CERT Yassine BENGANA, Abicom for Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0120",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T15:47:44.551607Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:02:44.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8",
                  "status": "unaffected"
                },
                {
                  "at": "6.2.7-1077",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime ESCOURBIAC, Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yassine BENGANA, Abicom for Michelin CERT"
        }
      ],
      "datePublic": "2025-04-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit."
            }
          ],
          "value": "A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "A local Windows user (or malware) with non-administrative rights elevates their privileges to NT AUTHORITY/SYSTEM."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250 Execution with Unnecessary Privileges",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-02T19:08:27.987Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0120"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.7-1077 or 6.2.8 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nSuggested Solution\nGlobalProtect App 6.3 on WindowsUpgrade to 6.3.3 or laterGlobalProtect App 6.2 on Windows\nUpgrade to 6.2.7-1077 or 6.2.8 or later\nGlobalProtect App 6.1 on Windows\nUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\nGlobalProtect App 6.0 on Windows\nUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\nGlobalProtect App on macOSNo action neededGlobalProtect App on LinuxNo action neededGlobalProtect App on iOSNo action neededGlobalProtect App on AndroidNo action neededGlobalProtect UWP AppNo action needed"
        }
      ],
      "source": {
        "defect": [
          "GPC-19862",
          "GPC-19858"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-04-09T16:00:00.000Z",
          "value": "Initial Publication"
        },
        {
          "lang": "en",
          "time": "2025-05-02T19:00:00.000Z",
          "value": "Updated the fix version for 6.2.7"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation (PE) Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0120",
    "datePublished": "2025-04-11T01:44:48.253Z",
    "dateReserved": "2024-12-20T23:23:21.499Z",
    "dateUpdated": "2025-05-02T19:08:27.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0118 (GCVE-0-2025-0118)

Vulnerability from nvd – Published: 2025-03-12 18:36 – Updated: 2025-03-12 18:52

Title

GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability

Summary

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-12 18:48 UTC

CWE

CWE-618 - Exposed Unsafe ActiveX Method

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0118	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Unaffected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.5 (custom) Affected: 6.1.0 , < 6.1.6 (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All , < 6.3.3 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-03-12 16:00

Credits

Maxime ESCOURBIAC, Michelin CERT Yassine BENGANA, Abicom for Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0118",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-12T18:48:05.801831Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-12T18:52:08.115Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "unaffected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.5",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.1.6",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.6",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "You are vulnerable to this issue only if you configured GlobalProtect authentication to use SAML authentication.\u003cbr\u003e\u003cbr\u003eYou can verify whether you configured SAML authentication on your GlobalProtect portals by checking your firewall web interface (\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e \u0026gt; \u003cb\u003ePortals\u003c/b\u003e \u0026gt; (portal-config) \u0026gt; \u003cb\u003eAuthentication\u003c/b\u003e)."
            }
          ],
          "value": "You are vulnerable to this issue only if you configured GlobalProtect authentication to use SAML authentication.\n\nYou can verify whether you configured SAML authentication on your GlobalProtect portals by checking your firewall web interface (Network \u003e GlobalProtect \u003e Portals \u003e (portal-config) \u003e Authentication)."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime ESCOURBIAC, Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yassine BENGANA, Abicom for Michelin CERT"
        }
      ],
      "datePublic": "2025-03-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device.\u003cbr\u003e\u003cbr\u003eThis issue does not apply to the GlobalProtect app on other (non-Windows) platforms.\u0026nbsp;"
            }
          ],
          "value": "A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device.\n\nThis issue does not apply to the GlobalProtect app on other (non-Windows) platforms."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-104",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-104 Cross Zone Scripting"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "ACTIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "An attacker deceives an authenticated Windows user and entices the user to navigate to a malicious web page during the GlobalProtect SAML login process."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-618",
              "description": "CWE-618 Exposed Unsafe ActiveX Method",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-12T18:46:41.580Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0118"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The issue is addressed by hardening the browser embedded in GlobalProtect app to disallow ActiveX plugins. This security enhancement is implemented in patched versions of the GlobalProtect app, so upgrading resolves the issue.\u0026nbsp;\u003cbr\u003e\u003cbr\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.5 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.6 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "The issue is addressed by hardening the browser embedded in GlobalProtect app to disallow ActiveX plugins. This security enhancement is implemented in patched versions of the GlobalProtect app, so upgrading resolves the issue.\u00a0\n\nVersion\nSuggested Solution\nGlobalProtect App 6.3 on Windows\nUpgrade to 6.3.3 or later\nGlobalProtect App 6.2 on Windows\nUpgrade to 6.2.5 or later\nGlobalProtect App 6.1 on WindowsUpgrade to 6.1.6 or later\nGlobalProtect App 6.0 on Windows\nUpgrade to 6.0.11 or later\nGlobalProtect App on macOSNo action neededGlobalProtect App on LinuxNo action neededGlobalProtect App on iOSNo action neededGlobalProtect App on AndroidNo action neededGlobalProtect UWP AppNo action needed"
        }
      ],
      "source": {
        "defect": [
          "GPC-19859"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "You can mitigate this issue by using a different form of authentication for the GlobalProtect portal such as Client Certificate Authentication, RADIUS, TACACS+, LDAP, or Kerberos. You can find information about configuring authentication for the GlobalProtect portal in this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-authentication-configuration-tab\"\u003edocumentation\u003c/a\u003e."
            }
          ],
          "value": "You can mitigate this issue by using a different form of authentication for the GlobalProtect portal such as Client Certificate Authentication, RADIUS, TACACS+, LDAP, or Kerberos. You can find information about configuring authentication for the GlobalProtect portal in this  documentation https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-authentication-configuration-tab ."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0118",
    "datePublished": "2025-03-12T18:36:44.290Z",
    "dateReserved": "2024-12-20T23:23:19.630Z",
    "dateUpdated": "2025-03-12T18:52:08.115Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2024-5921 (GCVE-0-2024-5921)

Vulnerability from nvd – Published: 2024-11-27 03:50 – Updated: 2025-02-20 22:30

Title

GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation

Summary

An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint. Please subscribe to our RSS feed https://security.paloaltonetworks.com/rss.xml to be alerted to new updates to this and other advisories.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-11-27 04:55 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto mitre root

References

3 references

URL	Tags
https://security.paloaltonetworks.com/CVE-2024-5921	vendor-advisory
https://blog.amberwolf.com/blog/2024/november/pal…	exploit
https://github.com/AmberWolfCyber/NachoVPN	exploit

Impacted products

7 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.2 (custom) Affected: 6.2.0 , < 6.2.6 (custom) Affected: 6.1.0 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.2 (custom) Affected: 6.2.0 , < 6.2.6-c857 (custom) Affected: 6.1.0 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.2.0 , < 6.2.1-c31 (custom) Affected: 6.1.0 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.6 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.7 (custom)
Palo Alto Networks	GlobalProtect App	Unaffected: 6.0.0 (custom) Unaffected: 5.1.0 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.2.0 , < 6.2.6 (custom)

Date Public

2024-11-26 02:45

Credits

Maxime ESCOURBIAC, Michelin CERT Yassine BENGANA, Abicom for Michelin CERT Richard Warren and David Cash of AmberWolf

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-5921",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-27T04:55:17.649111Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-27T16:57:39.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.2",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.6",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.6",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.2",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.6-c857",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.6-c857",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.1-c31",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.1-c31",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "lessThan": "6.1.6",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.7",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.7",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "FIPS-CC mode"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "6.0.0",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "5.1.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.2.6",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.6",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime ESCOURBIAC, Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yassine BENGANA, Abicom for Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Richard Warren and David Cash of AmberWolf"
        }
      ],
      "datePublic": "2024-11-26T02:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cp\u003eAn insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.\u003c/p\u003e\u003cp\u003ePlease subscribe to \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://security.paloaltonetworks.com/rss.xml\"\u003eour RSS feed\u003c/a\u003e to be alerted to new updates to this and other advisories.\u003c/p\u003e"
            }
          ],
          "value": "An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint.\n\nPlease subscribe to  our RSS feed https://security.paloaltonetworks.com/rss.xml  to be alerted to new updates to this and other advisories."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of this issue. We are aware of a publicly available conference talk and blog posts discussing this issue. A proof of concept for this issue is also publicly available.\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue. We are aware of a publicly available conference talk and blog posts discussing this issue. A proof of concept for this issue is also publicly available."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "PHYSICAL",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:P/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "An attacker on the same subnet as an end user who can influence DNS traffic can cause the user to connect to a malicious GlobalProtect portal."
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "A local user with non-administrative privileges connects to a malicious GlobalProtect portal."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-20T22:30:01.359Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-5921"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://blog.amberwolf.com/blog/2024/november/palo-alto-globalprotect---code-execution-and-privilege-escalation-via-malicious-vpn-server-cve-2024-5921/"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/AmberWolfCyber/NachoVPN"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThis issue is fixed in GlobalProtect app 6.2.1-c31 on Linux, GlobalProtect app 6.2.6 on Windows, GlobalProtect app 6.2.6-c857 on macOS, GlobalProtect app 6.3.2 on Windows and macOS, and all later GlobalProtect app versions. Additional fixes are under development and will be made available for the remaining platforms (Linux, iOS, and Android).\u003c/p\u003eThe fix for this vulnerability requires three steps:\u003cbr\u003e\u003col\u003e\u003cli\u003eEnsure that all of your GlobalProtect portals use TLS certificate chains that meet the criteria specified in the \"FIPS-CC Certification Validation\" table in \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues\"\u003eour documentation\u003c/a\u003e.\u003c/li\u003e\u003cli\u003eEnsure that the TLS certificate chains used by the GlobalProtect portals are added to the root certificate store in your operating system.\u003c/li\u003e\u003cli\u003eInstall a fixed version of GlobalProtect using one of the deployment options below. This setting enforces strict X.509v3 verification checks on the certificate provided by the GlobalProtect portal.\u003cbr\u003e\u003c/li\u003e\u003c/ol\u003e\u003cp\u003eNote: Prisma Access customers using portals with a *.gpcloudservice.com domain name already have valid TLS certificate chains. The root certificate for these portals is from GoDaddy, which is trusted by default in Windows, macOS, RHEL, Ubuntu, iOS, and Android. Therefore, Prisma Access customers using a GlobalProtect portal with a *.gpcloudservice.com domain name should only need to perform step 3 above.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eImportant\u003c/b\u003e: If your GlobalProtect portals do not use valid X.509V3 TLS certificate chains, this will result in TLS verification failures. To generate a GlobalProtect portal certificate that can be used with a fixed version of GlobalProtect app, refer to the first \"FIPS-CC Certification Validation\" table in \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues\"\u003eour documentation\u003c/a\u003e.\u003cb\u003e\u003cbr\u003e\u003c/b\u003e\u003c/p\u003e\u003cp\u003e\u003cb\u003e\u003c/b\u003e\u003cb\u003e\u003c/b\u003e\u003cb\u003eWarning: Performance Concern:\u003c/b\u003e Some customers reported problems connecting to Portals and Gateways when this solution was implemented in certain situations. This is due to certificate providers that rate limit requests for Online Certificate Status Protocol (OCSP) and certificate revocation list (CRL) checks. This happens when multiple users connect to GlobalProtect Portals from a single public IP (such as NAT) around the same time, such as when hundreds or thousands of end users connect around the start of a workday from a single office.\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is fixed in GlobalProtect app 6.2.1-c31 on Linux, GlobalProtect app 6.2.6 on Windows, GlobalProtect app 6.2.6-c857 on macOS, GlobalProtect app 6.3.2 on Windows and macOS, and all later GlobalProtect app versions. Additional fixes are under development and will be made available for the remaining platforms (Linux, iOS, and Android).\n\nThe fix for this vulnerability requires three steps:\n  *  Ensure that all of your GlobalProtect portals use TLS certificate chains that meet the criteria specified in the \"FIPS-CC Certification Validation\" table in  our documentation https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues .\n  *  Ensure that the TLS certificate chains used by the GlobalProtect portals are added to the root certificate store in your operating system.\n  *  Install a fixed version of GlobalProtect using one of the deployment options below. This setting enforces strict X.509v3 verification checks on the certificate provided by the GlobalProtect portal.\n\nNote: Prisma Access customers using portals with a *.gpcloudservice.com domain name already have valid TLS certificate chains. The root certificate for these portals is from GoDaddy, which is trusted by default in Windows, macOS, RHEL, Ubuntu, iOS, and Android. Therefore, Prisma Access customers using a GlobalProtect portal with a *.gpcloudservice.com domain name should only need to perform step 3 above.\n\nImportant: If your GlobalProtect portals do not use valid X.509V3 TLS certificate chains, this will result in TLS verification failures. To generate a GlobalProtect portal certificate that can be used with a fixed version of GlobalProtect app, refer to the first \"FIPS-CC Certification Validation\" table in  our documentation https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues .\n\n\nWarning: Performance Concern: Some customers reported problems connecting to Portals and Gateways when this solution was implemented in certain situations. This is due to certificate providers that rate limit requests for Online Certificate Status Protocol (OCSP) and certificate revocation list (CRL) checks. This happens when multiple users connect to GlobalProtect Portals from a single public IP (such as NAT) around the same time, such as when hundreds or thousands of end users connect around the start of a workday from a single office."
        }
      ],
      "source": {
        "defect": [
          "GPC-19860",
          "GPC-19861"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-02-20T22:20:00.000Z",
          "value": "Updated fix availability for 6.2.1 on Linux and solutions section to provide steps needed for Linux"
        },
        {
          "lang": "en",
          "time": "2025-02-05T16:25:00.000Z",
          "value": "Updated ETA for 6.2.1-HF2 Linux, 6.1.6 Android, 6.1.7 iOS, and 6.2.6 UWP"
        },
        {
          "lang": "en",
          "time": "2025-01-17T18:00:00.000Z",
          "value": "Added 6.2.6-c857 macOS solution"
        },
        {
          "lang": "en",
          "time": "2025-01-13T19:00:00.000Z",
          "value": "Added planned fix version and ETA for 6.1 for Android"
        },
        {
          "lang": "en",
          "time": "2024-12-24T22:00:00.000Z",
          "value": "Updated product status table for GlobalProtect app 6.3.2 and added macOS solution"
        },
        {
          "lang": "en",
          "time": "2024-12-19T07:00:00.000Z",
          "value": "Updated ETAs for GlobalProtect app versions 6.3, 6.2, and 6.1"
        },
        {
          "lang": "en",
          "time": "2024-12-16T18:00:00.000Z",
          "value": "Updated planned fix version and ETA for 6.3 for Windows and macOS"
        },
        {
          "lang": "en",
          "time": "2024-12-13T21:50:00.000Z",
          "value": "Added note to the solution about potential performance concern"
        },
        {
          "lang": "en",
          "time": "2024-12-06T17:15:00.000Z",
          "value": "Updated affected products, added ETAs, clarified solution, and added frequently asked questions"
        },
        {
          "lang": "en",
          "time": "2024-11-27T03:35:00.000Z",
          "value": "Added registry-based deployment option to solution, and added frequently asked questions"
        },
        {
          "lang": "en",
          "time": "2024-11-26T20:15:00.000Z",
          "value": "Clarified impact, solution, and added frequently asked questions"
        },
        {
          "lang": "en",
          "time": "2024-11-26T02:45:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eYou can mitigate this issue for all platforms (\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-using-the-windows-registry\"\u003eWindows\u003c/a\u003e, \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-using-the-macos-property-list\"\u003emacOS\u003c/a\u003e, \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-on-linux-endpoints-redhat\"\u003eLinux\u003c/a\u003e, \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-and-verify-fips-cc-mode-using-workspaceone-on-ios-devices\"\u003eiOS\u003c/a\u003e, \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-and-verify-fips-cc-mode-using-microsoft-intune-on-android-endpoints\"\u003eAndroid\u003c/a\u003e) by using the GlobalProtect app 6.0 in FIPS-CC mode or GlobalProtect app 5.1 in FIPS-CC mode. For details, refer to the first \"FIPS-CC Certification Validation\" table in \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues\"\u003eour documentation\u003c/a\u003e.\u003c/p\u003e\u003cp\u003eNote: this is separate from any FIPS-CC configurations on any GlobalProtect portals or gateways. This workaround is specific to FIPS-CC mode on the GlobalProtect app. GlobalProtect portals or gateways do not need to use FIPS-CC mode as part of this workaround.\u003c/p\u003e"
            }
          ],
          "value": "You can mitigate this issue for all platforms ( Windows https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-using-the-windows-registry ,  macOS https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-using-the-macos-property-list ,  Linux https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-fips-cc-mode-on-linux-endpoints-redhat ,  iOS https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-and-verify-fips-cc-mode-using-workspaceone-on-ios-devices ,  Android https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/enable-and-verify-fips-cc-mode/enable-and-verify-fips-cc-mode-using-microsoft-intune-on-android-endpoints ) by using the GlobalProtect app 6.0 in FIPS-CC mode or GlobalProtect app 5.1 in FIPS-CC mode. For details, refer to the first \"FIPS-CC Certification Validation\" table in  our documentation https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/certifications/resolve-fips-cc-mode-issues .\n\nNote: this is separate from any FIPS-CC configurations on any GlobalProtect portals or gateways. This workaround is specific to FIPS-CC mode on the GlobalProtect app. GlobalProtect portals or gateways do not need to use FIPS-CC mode as part of this workaround."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2024-5921",
    "datePublished": "2024-11-27T03:50:13.596Z",
    "dateReserved": "2024-06-12T15:27:58.017Z",
    "dateUpdated": "2025-02-20T22:30:01.359Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-0299 (GCVE-0-2026-0299)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:04 – Updated: 2026-08-13 13:21

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0299	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0299",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:52.857599Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:21:02.891Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enable a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:04:07.275Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0299"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003cbr\u003e \u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;\u003cspan\u003e(6.3.3-1121) \u003c/span\u003e or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through\u0026nbsp;6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 \u003cspan\u003e(6.3.3-1121) \u003c/span\u003eor later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through\u0026nbsp;6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13  (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds exist for this issue."
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0299",
    "datePublished": "2026-08-13T02:04:07.275Z",
    "dateReserved": "2025-11-03T20:44:57.175Z",
    "dateUpdated": "2026-08-13T13:21:02.891Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0298 (GCVE-0-2026-0298)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:02 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)

Summary

An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0298	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0298",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:53.877148Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:48.963Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "macOS",
            "Android",
            "Chrome OS",
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eThis issue is applicable only to devices configured to use SAML authentication in the GlobalProtect\u003c/span\u003e \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon\u003c/span\u003e\u003c/a\u003e\u003cspan\u003e feature.\u003c/span\u003e\u003c/p\u003e"
            }
          ],
          "value": "This issue is applicable only to devices configured to use SAML authentication in the GlobalProtect Connect Before Logon (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) feature."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:macos:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
            }
          ],
          "value": "An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect\u2122 app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.\n\nThe GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS  is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-242",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-242 Code Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-94",
              "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:02:47.196Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0298"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App All on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App All on macOS                                 No action needed.\nGlobalProtect App All on Linux                                 No action needed.\nGlobalProtect App All on iOS                                   No action needed.\nGlobalProtect App All on Android                               No action needed.\nGlobalProtect App All on Chrome OS                             No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003cspan\u003eCustomers can mitigate the risk of this issue by taking either of the following actions:\u003c/span\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003eConnect Before Logon (CBL\u003c/span\u003e\u003c/a\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method\"\u003e\u003cspan\u003e)\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003ewithout SAML Authentication\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cspan\u003eUse\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon\"\u003e\u003cspan\u003ePre-logon with machine certificate\u003c/span\u003e\u003c/a\u003e\u0026nbsp;\u003cspan\u003einstead of Connect Before Logon (CBL).\u003c/span\u003e\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following actions:\n\n 1. Use Connect Before Logon (CBL (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method)) (https://docs.paloaltonetworks.com/globalprotect/5-2/globalprotect-app-user-guide/globalprotect-app-for-windows/use-connect-before-logon-followed-by-the-authentication-method) without SAML Authentication\n\n 2. Use Pre-logon with machine certificate (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-quick-configs/remote-access-vpn-with-pre-logon) instead of Connect Before Logon (CBL)."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.226Z",
      "x_cpeManuallyEdited": true,
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0298",
    "datePublished": "2026-08-13T02:02:47.196Z",
    "dateReserved": "2025-11-03T20:44:56.118Z",
    "dateUpdated": "2026-08-13T13:20:48.963Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0297 (GCVE-0-2026-0297)

Vulnerability from cvelistv5 – Published: 2026-08-13 02:01 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0297	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.5 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0297",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:54.896353Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:35.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.5",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.3.5",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:ios:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux). \u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux)."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T02:01:13.682Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0297"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14\u0026nbsp;(6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13\u0026nbsp;(6.2.8-1045) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h13\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h12\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3/6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.4\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.5 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                                 MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux      6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS          6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS          6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS          6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows        6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows        6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later. \nGlobalProtect App 6.3/6.1 on iOS        6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on iOS            6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on Android    6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on Android        6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3/6.1 on ChromeOS   6.1.0 through 6.3.4       Upgrade to 6.3.5 or later.\nGlobalProtect App 6.0 on ChromeOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eCustomers can mitigate the risk of this issue by taking either of the following three actions:\u003cbr\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003eEnforce SSL-Only VPN Connections:\u0026nbsp;Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode.\u0026nbsp;Customer can configure \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app\"\u003eConnect with SSL Only\u003c/a\u003e tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u0026gt; Portal \u0026gt; Agent Configuration\u0026gt;  Advanced Control for Tunnel Mode Behavior\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eCustomers can configure SSL only tunnel protocol by un-checking \u0027\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab\"\u003eEnable IPSec\u003c/a\u003e\u0027  on GlobalProtect gateway at\u003cb\u003e\u0026nbsp;\u003c/b\u003e\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGateway\u003c/b\u003e\u003cb\u003e \u003c/b\u003e\u0026gt;\u003cb\u003e \u003c/b\u003e\u003cb\u003eAgent \u003c/b\u003e\u0026gt; \u003cb\u003eTunnel Setting\u003c/b\u003e \u0026gt; \u003cb\u003eEnable IPSec\u003c/b\u003e\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u003cb\u003eWorkaround\u0026nbsp; for new and existing GlobalProtect app \u0026gt;= 6.2.8 or GlobalProtect app \u0026gt;= 6.3.3 installations on Windows and macOS\u003c/b\u003e \u003cbr\u003eGlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration\u0026nbsp;\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect\"\u003eEnable Strict Certificate Check\u003c/a\u003e which enables certificate checks required to mitigate this issue on Windows and macOS.\u003cbr\u003e\u003cbr\u003eThis configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u0026lt; 6.2.8.\u003cbr\u003eThis configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\u003cbr\u003e\u003cbr\u003e\u003cb\u003eWorkaround for new and existing GlobalProtect app \u0026lt; 6.2.8 or GlobalProtect app \u0026lt; 6.3.3 installations on macOS\u003c/b\u003e\u003cbr\u003e\u003cb\u003e\u003c/b\u003e\u003c/p\u003e\u003col\u003e\u003cli\u003e\u003cp\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist\"\u003eUse Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file\u003c/a\u003e\u0026nbsp;in /Library/Preferences.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eAdd a \"Settings\" section if it does not exist within the GlobalProtect section.\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003eWithin the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\u003c/p\u003e\u003c/li\u003e\u003cli\u003e\u003cp\u003e\u0026nbsp;Restart macOS.\u003c/p\u003e\u003c/li\u003e\u003c/ol\u003e\u003ctt\u003e\u003ctt\u003e\u2003\u0026lt;key\u0026gt;GlobalProtect\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u2003\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp; (removed for brevity)\u003c/tt\u003e\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp;\u2003 \u0026lt;key\u0026gt;Settings\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u2003\u0026nbsp;\u0026lt;dict\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;key\u0026gt;full-chain-cert-verify\u0026lt;/key\u0026gt;\u003c/tt\u003e\u003cbr\u003e\u003ctt\u003e\u0026nbsp; \u0026nbsp; \u0026nbsp;\u2003 \u0026nbsp; \u0026lt;string\u0026gt;yes\u0026lt;/string\u0026gt;\u003cbr\u003e\u003c/tt\u003e\u0026nbsp; \u0026nbsp;\u2003\u0026lt;/dict\u0026gt;\u003cbr\u003e\u0026lt;/dict\u0026gt;\u003c/tt\u003e\u003c/li\u003e\u003c/ol\u003e\u003cb\u003e\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\u003cbr\u003e\u003c/b\u003e\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\u003cbr\u003e\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\u003cbr\u003e\u003ctt\u003e\u2003\u2003\u2003\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;GlobalProtect\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;Settings\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;full-chain-cert-verify\u0026gt;yes\u0026lt;/full-chain-cert-verify\u0026gt;\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/Settings\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u2003\u0026lt;/GlobalProtect\u0026gt;\u003c/tt\u003e\u003cp\u003e\u003cbr\u003e\u003cb\u003e\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\u003c/b\u003e\u003cbr\u003e\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\u003cbr\u003e\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\".\u003c/p\u003e\u003cb\u003e\u003c/b\u003e"
            }
          ],
          "value": "Customers can mitigate the risk of this issue by taking either of the following three actions:\n\n\n 1. Enforce SSL-Only VPN Connections: Modify your GlobalProtect Portal configurations to disable IPSec/UDP tunneling, forcing the client applications to connect exclusively via SSL VPN mode. Customer can configure Connect with SSL Only (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-portals/customize-the-globalprotect-app) tunnel by configuring \u0027 Advanced Control for Tunnel Mode Behavior\u0027 on GlobalProtect Portal Network \u003e Portal \u003e Agent Configuration\u003e Advanced Control for Tunnel Mode Behavior\n\n 2. Customers can configure SSL only tunnel protocol by un-checking \u0027Enable IPSec (https://docs.paloaltonetworks.com/ngfw/help/10-2/globalprotect/network-globalprotect-gateways/globalprotect-gateways-agent-tab/tunnel-settings-tab)\u0027 on GlobalProtect gateway at Network \u003e Gateway \u003e Agent \u003e Tunnel Setting \u003e Enable IPSec\n\n 3. Workaround  for new and existing GlobalProtect app \u003e= 6.2.8 or GlobalProtect app \u003e= 6.3.3 installations on Windows and macOS\n    GlobalProtect 6.2.8 and GlobalProtect app 6.3.3 on Windows and macOS introduce a new configuration Enable Strict Certificate Check (https://docs.paloaltonetworks.com/platform-explorer?productCategoryTags=pan%3Aproductcategory%2Fglobalprotect) which enables certificate checks required to mitigate this issue on Windows and macOS.\n    \n    This configuration only takes effect after the first connection between the GlobalProtect client and the GlobalProtect portal. Therefore the first connection is not protected. To ensure that the first connection is also protected, additionally follow the steps noted below for GlobalProtect \u003c 6.2.8.\n    This configuration option is currently not available for the GlobalProtect app on platforms other than Windows and macOS.\n    \n    Workaround for new and existing GlobalProtect app \u003c 6.2.8 or GlobalProtect app \u003c 6.3.3 installations on macOS\n    \n    \n    1. Use Xcode to edit the com.paloaltonetworks.GlobalProtect.settings.plist file (https://docs.paloaltonetworks.com/globalprotect/10-1/globalprotect-admin/globalprotect-apps/deploy-app-settings-transparently/deploy-app-settings-to-mac-endpoints/deploy-app-settings-in-the-mac-plist) in /Library/Preferences.\n    \n    2. Add a \"Settings\" section if it does not exist within the GlobalProtect section.\n    \n    3. Within the \"Settings\" section, add the full-chain-cert-verify key and set the string value to yes\n    \n    4.  Restart macOS.\n    \u2003\u003ckey\u003eGlobalProtect\u003c/key\u003e\n    \u2003\u003cdict\u003e\n      \u2003  (removed for brevity)\n       \u2003 \u003ckey\u003eSettings\u003c/key\u003e\n      \u2003 \u003cdict\u003e\n         \u2003   \u003ckey\u003efull-chain-cert-verify\u003c/key\u003e\n         \u2003   \u003cstring\u003eyes\u003c/string\u003e\n       \u2003\u003c/dict\u003e\n    \u003c/dict\u003e\n\n\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Linux\n\u2003\u2003\u2003\u2003\u20031. Create the /opt/paloaltonetworks/globalprotect/pangps.xml pre-deployment configuration file.\n\u2003\u2003\u2003\u2003\u20032. Add the pre-deployment settings to the pangps.xml file\n\u2003\u2003\u2003\n\u2003\u2003\u2003\u2003\u2003\u2003\u003cGlobalProtect\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cSettings\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003cfull-chain-cert-verify\u003eyes\u003c/full-chain-cert-verify\u003e\n\u2003\u2003\u2003\u2003\u2003\u2003\u2003\u003c/Settings\n\u2003\u2003\u2003\u2003\u2003\u2003\u003c/GlobalProtect\u003e\n\n\n\u2003\u2003\u2003\u2003Workaround for new and existing GlobalProtect app installations on Android, iOS and ChromeOS\n\u2003\u2003\u2003\u2003Customers can use their endpoint mobile device management (MDM) tools to apply the following changes\n\u2003\u2003\u2003\u2003\u2003\u20031. Set the key \"full-chain-cert-verify\"=\"yes\"."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.171Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0297",
    "datePublished": "2026-08-13T02:01:13.682Z",
    "dateReserved": "2025-11-03T20:44:54.801Z",
    "dateUpdated": "2026-08-13T13:20:35.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0296 (GCVE-0-2026-0296)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:59 – Updated: 2026-08-13 13:29

Title

GlobalProtect App: Improper Certificate Validation Bypass Vulnerability

Summary

Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

Severity

4.5 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 13:29 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0296	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h15 (custom) Affected: 6.2.0 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (custom) Affected: 6.2.0 , < 6.2.8-h13 (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Chrome_OS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Chrome_OS::

Date Public

2026-08-12 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0296",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T13:29:34.520951Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:29:46.735Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h15",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.9:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c982:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c948:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c910:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c471:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c431:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c416:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c317:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c263:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8-c243:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Chrome_OS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Chrome_OS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h15",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:linux:*:*:*:*:*",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cspan\u003eImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\u003c/span\u003e\u003cb\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/b\u003e\u003cspan\u003eThe GlobalProtect app on iOS, Android, and Chrome OS is not affected.\u003c/span\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect\u2122 app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.\n\nThe GlobalProtect app on iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Man in the Middle Attack"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:59:45.972Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0296"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\n  \u003cthead\u003e\n    \u003ctr\u003e\n      \u003cth\u003eVersion\u003c/th\u003e\n      \u003cth\u003eMinor Version\u003c/th\u003e\n      \u003cth\u003eSuggested Solution\u003c/th\u003e\n    \u003c/tr\u003e\n  \u003c/thead\u003e\n  \u003ctbody\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3/6.2 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.3.3-h14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\n      \u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\n      \u003ctd\u003eUpgrade to 6.0.15 or later.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n    \u003ctr\u003e\n      \u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\n      \u003ctd\u003e\u003c/td\u003e\n      \u003ctd\u003eNo action needed.\u003c/td\u003e\n    \u003c/tr\u003e\n  \u003c/tbody\u003e\n\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3/6.2 on Linux   6.2.0 through 6.3.3-h14   Upgrade to 6.3.3-h15 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on iOS                                       No action needed.\nGlobalProtect App on Android                                   No action needed.\nGlobalProtect App on Chrome OS                                 No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Improper Certificate Validation Bypass Vulnerability",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue."
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.9",
        "GlobalProtect App 6.2.8-c982",
        "GlobalProtect App 6.2.8-c948",
        "GlobalProtect App 6.2.8-c910",
        "GlobalProtect App 6.2.8-c471",
        "GlobalProtect App 6.2.8-c431",
        "GlobalProtect App 6.2.8-c416",
        "GlobalProtect App 6.2.8-c317",
        "GlobalProtect App 6.2.8-c263",
        "GlobalProtect App 6.2.8-c243",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.092Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0296",
    "datePublished": "2026-08-13T01:59:45.972Z",
    "dateReserved": "2025-11-03T20:44:53.961Z",
    "dateUpdated": "2026-08-13T13:29:46.735Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0295 (GCVE-0-2026-0295)

Vulnerability from cvelistv5 – Published: 2026-08-13 01:57 – Updated: 2026-08-13 13:20

Title

GlobalProtect App: Local Privilege Escalation via Race Condition on macOS

Summary

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Severity

4.1 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-13 03:55 UTC

CWE

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0295	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h14 (6.3.3-1121) (custom) Affected: 6.2.0 , < 6.2.8-h13 (6.2.8-1045) (custom) Affected: 6.0.0 , < 6.0.15 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-08-12 16:00

Credits

Alex Bourla and Graham Brereton

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-13T03:55:55.918274Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-13T13:20:22.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h14 (6.3.3-1121)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h13 (6.2.8-1045)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.15",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.15",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Windows",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h14_6.3.3-1121_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h13_6.2.8-1045_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.15",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:linux:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:windows:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:android:*:*:*:*:*",
                  "vulnerable": false
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:chrome_os:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla and Graham Brereton"
        }
      ],
      "datePublic": "2026-08-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
            }
          ],
          "value": "A race condition in the Palo Alto Networks GlobalProtect\u2122 client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.\n\nThe GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-29",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-362",
              "description": "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T01:57:22.394Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0295"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.3-h13\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3-h14 (6.3.3-1121) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.2.0 through 6.2.8-h12\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.2.8-h13 (6.2.8-1045) or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003e\u0026nbsp;GlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.14\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.15 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                           MINOR VERSION             SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS    6.3.0 through 6.3.3-h13   Upgrade to 6.3.3-h14 (6.3.3-1121) or later.\nGlobalProtect App 6.2 on macOS    6.2.0 through 6.2.8-h12   Upgrade to 6.2.8-h13 (6.2.8-1045) or later.\n GlobalProtect App 6.0 on macOS   6.0.0 through 6.0.14      Upgrade to 6.0.15 or later.\nGlobalProtect App on Linux                                  No action needed.\nGlobalProtect App on Windows                                No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-08-12T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation via Race Condition on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No known workarounds or mitigations exist for this issue.\u0026nbsp;"
            }
          ],
          "value": "No known workarounds or mitigations exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.0.14",
        "GlobalProtect App 6.0.13",
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_cpeGeneratedAt": "2026-08-12T02:10:58.042Z",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0295",
    "datePublished": "2026-08-13T01:57:22.394Z",
    "dateReserved": "2025-11-03T20:44:53.142Z",
    "dateUpdated": "2026-08-13T13:20:22.119Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0267 (GCVE-0-2026-0267)

Vulnerability from cvelistv5 – Published: 2026-06-10 20:31 – Updated: 2026-06-11 14:41

Title

GlobalProtect App: Information Exposure Vulnerability on macOS

Summary

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

Severity

4.4 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-11 14:41 UTC

CWE

CWE-532 - Insertion of Sensitive Information into Log File

Assigner

palo_alto mitre root

References

2 references

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0267	vendor-advisory
https://security.paloaltonetworks.com/CVE-2024-8687	related

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h1 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2026-06-10 16:00

Credits

Palo Alto Networks thanks one of our customers for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0267",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-11T14:41:13.659641Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-11T14:41:21.436Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h1",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\u003cbr\u003e\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow with Password\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue applies to GlobalProtect app deployments where the following feature is enabled on the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama:\n\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Allow with Password"
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h1",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h2",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Palo Alto Networks thanks one of our customers for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-06-10T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
            }
          ],
          "value": "An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-155",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-155 Screen Temporary Files for Sensitive Information"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "AUTOMATIC",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/AU:N/R:A/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of Sensitive Information into Log File",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-10T20:31:37.320Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0267"
        },
        {
          "tags": [
            "related"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2024-8687"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version Range\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h1 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                          MINOR VERSION RANGE      SUGGESTED SOLUTION\nGlobalProtect App 6.3 on macOS   6.3.0 through 6.3.3      Upgrade to 6.3.3-h1 or later.\nGlobalProtect App 6.2 on macOS   6.2.0 through 6.2.8-h1   Upgrade to 6.2.8-h2 or later.\nGlobalProtect App on Windows                              Not Applicable\nGlobalProtect App on Linux                                Not Applicable\nGlobalProtect App on iOS                                  Not Applicable\nGlobalProtect App on Android                              Not Applicable\nGlobalProtect App on Chrome OS                            Not Applicable"
        }
      ],
      "source": {
        "discovery": "USER"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-10T16:00:00.000Z",
          "value": "Initial publication"
        }
      ],
      "title": "GlobalProtect App: Information Exposure Vulnerability on macOS",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\u003cul\u003e\u003cli\u003e\u003cb\u003eNetwork\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003ePortals\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(portal-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAgent\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003e(agent-config)\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eApp\u003c/b\u003e\u0026nbsp;\u0026gt; \u003cb\u003eAllow User to Uninstall GlobalProtect App\u0026nbsp;\u0026gt; Disallow\u003c/b\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "On the GlobalProtect Portal configuration on PAN-OS firewalls or Panorama, change the following setting (if enabled) to \"Disallow\":\n * Network\u00a0\u003e GlobalProtect\u00a0\u003e Portals\u00a0\u003e (portal-config)\u00a0\u003e Agent\u00a0\u003e (agent-config)\u00a0\u003e App\u00a0\u003e Allow User to Uninstall GlobalProtect App\u00a0\u003e Disallow"
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.3",
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.8",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0267",
    "datePublished": "2026-06-10T20:31:37.320Z",
    "dateReserved": "2025-11-03T20:44:27.401Z",
    "dateUpdated": "2026-06-11T14:41:21.436Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0249 (GCVE-0-2026-0249)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:32 – Updated: 2026-05-15 09:57

Title

GlobalProtect App: Certificate Validation Bypass Vulnerabilities

Summary

Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

Severity

4.9 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-15 03:56 UTC

CWE

CWE-295 - Improper Certificate Validation

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0249	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.1.0 , < 6.1.13 (custom) Affected: 6.0.0 , < 6.0.14 (custom)
Palo Alto Networks	GlobalProtect App	Affected: 6.0.0 , < 6.0.13 (custom)
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0249",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-15T03:56:08.016080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-15T09:57:30.206Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "iOS",
            "Windows UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an \u003ca href=\"https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings\"\u003eembedded browser is enabled\u003c/a\u003e. No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "The issue is applicable to the GlobalProtect app on macOS only if SAML authentication with an embedded browser is enabled (https://docs.paloaltonetworks.com/globalprotect/administration/globalprotect-user-authentication/set-up-external-authentication/set-up-saml-authentication/enable-default-browser-for-saml-authentication-using-client-authentication-settings). No special configuration is required for the GlobalProtect app on Android/Chrome OS to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Android:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:ChromeOS:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks Kakao Corp. Service Security Team and our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software.\n\nThe GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-94",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-94 Adversary in the Middle (AiTM)"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-295",
              "description": "CWE-295 Improper Certificate Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:32:12.091Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0249"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Chrome OS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version                              Minor Version            Suggested Solution\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on Chrome OS   6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Chrome OS   6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App on Windows                                  No action needed.\nGlobalProtect App on Linux                                    No action needed.\nGlobalProtect App on iOS                                      No action needed.\nGlobalProtect App on UWP                                      No action needed."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Certificate Validation Bypass Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0249",
    "datePublished": "2026-05-13T18:32:12.091Z",
    "dateReserved": "2025-11-03T20:44:09.928Z",
    "dateUpdated": "2026-05-15T09:57:30.206Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0250 (GCVE-0-2026-0250)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:26 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Summary

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-787 - Out-of-bounds Write

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0250	vendor-advisory

Impacted products

7 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.1 , < 6.1.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::linux:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::windows:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::macos:::::*
Palo Alto Networks	GlobalProtect App	Affected: 6.0 , < 6.0.14 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:::android:::::* cpe:2.3:a:palo_alto_networks:globalprotect_app:::chrome_os:::::*
Palo Alto Networks	GlobalProtect UWP App	Affected: 6.3 , < 6.3.3-h10 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:::windows:::::*
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

our internal security research teams

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0250",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:37.034Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.1.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.13",
              "status": "affected",
              "version": "6.1",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "MacOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.0.14",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.14",
              "status": "affected",
              "version": "6.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h10",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h10",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "iOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h9_6.3.3-999_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8-h10_6.2.8-948_",
                  "versionStartIncluding": "6.2.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.1.13",
                  "versionStartIncluding": "6.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h2_6.3.3-42_",
                  "versionStartIncluding": "6.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:linux:*:*:*:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:macos:*:*:*:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:android:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:chrome_os:*:*:*:*:*",
                  "versionEndExcluding": "6.0.14",
                  "versionStartIncluding": "6.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:*:*:windows:*:*:*:*:*",
                  "versionEndExcluding": "6.3.3-h10",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:all:*:ios:*:*:*:*:*",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "our internal security research teams"
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\u003c/p\u003e\u003cp\u003eThe GlobalProtect app on iOS is not affected.\u003c/p\u003e"
            }
          ],
          "value": "A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect\u2122 app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.\n\n\n\nThe GlobalProtect app on iOS is not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of this issue.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-540",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-540 Overread Buffers"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:26:51.927Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0250"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2/6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Android\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Android\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.1.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on ChromeOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.13\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.14 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003e6.1.0 through 6.3.3-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h10 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                              MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.3 on Windows     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on Windows     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on Windows     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.0 on Linux       6.0.0 through 6.0.10     Upgrade to 6.0.11 or later. \nGlobalProtect App 6.2/6.3 on Linux   6.2.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on macOS       6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.2 on macOS       6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.0 on macOS       6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.1 on Android     6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on Android     6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect App 6.1 on ChromeOS    6.1.0 through 6.1.12     Upgrade to 6.1.13 or later.\nGlobalProtect App 6.0 on ChromeOS    6.0.0 through 6.0.13     Upgrade to 6.0.14 or later.\nGlobalProtect UWP App                6.1.0 through 6.3.3-h9   Upgrade to 6.3.3-h10 or later.\nGlobalProtect App on iOS                                      No action needed"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial Publication."
        }
      ],
      "title": "GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0250",
    "datePublished": "2026-05-13T18:26:51.927Z",
    "dateReserved": "2025-11-03T20:44:11.022Z",
    "dateUpdated": "2026-05-14T03:56:37.034Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-0251 (GCVE-0-2026-0251)

Vulnerability from cvelistv5 – Published: 2026-05-13 18:20 – Updated: 2026-05-14 03:56

Title

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Summary

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.9 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-13 00:00 UTC

CWE

CWE-426 - Untrusted Search Path

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2026-0251	vendor-advisory

Impacted products

4 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h9 (6.3.3-999) (custom) Affected: 6.2.0 , < 6.2.8-h10 (6.2.8-948) (custom) Affected: 6.0.0 , < 6.0.13 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3-h2 (6.3.3-42) (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux::
Palo Alto Networks	Global Protect App	Unaffected: All (custom)

Date Public

2026-05-13 16:00

Credits

Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0251",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-14T03:56:34.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h9 (6.3.3-999)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h9 (6.3.3-999)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h10 (6.2.8-948)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h10 (6.2.8-948)",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.13",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.13",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h2 (6.3.3-42)",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3-h2 (6.3.3-42)",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "ChromeOS",
            "iOS",
            "UWP"
          ],
          "product": "Global Protect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo special configuration is required to be affected by this issue.\u003c/p\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.3.3-h9_(6.3.3-999)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.2.8-h10_(6.2.8-948)",
                  "versionStartIncluding": "6.2.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:*",
                  "versionEndExcluding": "6.0.13",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.3.3-h2_(6.3.3-42)",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Linux:*:*",
                  "versionEndExcluding": "6.0.11",
                  "versionStartIncluding": "6.0.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "other",
          "value": "Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue."
        }
      ],
      "datePublic": "2026-05-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eMultiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.\u003c/p\u003e"
            }
          ],
          "value": "Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect\u2122 app allow a local user to escalate their privileges to NT AUTHORITY\\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.\n\nThe GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003ePalo Alto Networks is not aware of any malicious exploitation of these issues.\u003c/p\u003e"
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of these issues."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-426",
              "description": "CWE-426 Untrusted Search Path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-13T18:20:01.156Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2026-0251"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003c/th\u003e\u003cth\u003eMinor Version\u003c/th\u003e\u003cth\u003eSuggested Solution\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.12\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.13 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h10 (6.2.8-948) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h8\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h9 (6.3.3-999) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Linux\u003c/td\u003e\u003ctd\u003e6.0.0 through 6.0.10\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Linux\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.9\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Linux\u003c/td\u003e\u003ctd\u003e6.3.0 through 6.3.3-h1\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3-h2 (6.3.3-42) or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on UWP\u003c/td\u003e\u003ctd\u003e\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "VERSION                            MINOR VERSION            SUGGESTED SOLUTION\nGlobalProtect App 6.0 on Windows   6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on Windows   6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on Windows   6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on macOS     6.0.0 through 6.0.12     Upgrade to 6.0.13 or later.\nGlobalProtect App 6.2 on macOS     6.2.0 through 6.2.8-h9   Upgrade to 6.2.8-h10 (6.2.8-948) or later.\nGlobalProtect App 6.3 on macOS     6.3.0 through 6.3.3-h8   Upgrade to 6.3.3-h9 (6.3.3-999) or later.\nGlobalProtect App 6.0 on Linux     6.0.0 through 6.0.10     Upgrade to 6.0.11 or later\nGlobalProtect App 6.2 on Linux     6.2.0 through 6.2.9      Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App 6.3 on Linux     6.3.0 through 6.3.3-h1   Upgrade to 6.3.3-h2 (6.3.3-42) or later.\nGlobalProtect App on Android                                No action needed.\nGlobalProtect App on Chrome OS                              No action needed.\nGlobalProtect App on iOS                                    No action needed.\nGlobalProtect App on UWP                                    No action needed."
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2026-05-13T16:00:00.000Z",
          "value": "Initial publication."
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation Vulnerabilities",
      "workarounds": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eNo known workarounds exist for this issue.\u003c/p\u003e"
            }
          ],
          "value": "No known workarounds exist for this issue."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.0.12",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2026-0251",
    "datePublished": "2026-05-13T18:20:01.156Z",
    "dateReserved": "2025-11-03T20:44:11.930Z",
    "dateUpdated": "2026-05-14T03:56:34.668Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-4227 (GCVE-0-2025-4227)

Vulnerability from cvelistv5 – Published: 2025-06-13 05:50 – Updated: 2025-06-23 16:06

Title

GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement

Summary

An improper access control vulnerability in the Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement feature of the Palo Alto Networks GlobalProtect™ app allows certain packets to remain unencrypted instead of being properly secured within the tunnel. An attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute.

Severity

1 (Low)


                        
                          CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Green

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-13 18:50 UTC

CWE

CWE-319 - Cleartext Transmission of Sensitive Information

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-4227	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.2-566 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All , < 11.2.7 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::UWP:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::UWP::

Date Public

2025-06-11 16:00

Credits

Tan Cheng Ghee of OCBC Bank

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-4227",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-13T18:50:08.392375Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-06-23T16:06:55.397Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3-h1",
                  "status": "unaffected"
                },
                {
                  "at": "6.3.2-566",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.2-566",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:UWP:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:UWP:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux",
            "Android",
            "iOS",
            "Chrome OS",
            "UWP"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "11.2.7",
                  "status": "unaffected"
                }
              ],
              "lessThan": "11.2.7",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "This issue affects Windows and macOS endpoints with \"Endpoint Traffic Policy Enforcement\" enabled. To verify if you have Endpoint Traffic Policy Enforcement enabled:\u003cbr\u003e\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Endpoint Traffic Policy Enforcement \u003cb\u003e\u0026gt;\u003c/b\u003e (Option not set to: \u201cNo\u201d)\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "This issue affects Windows and macOS endpoints with \"Endpoint Traffic Policy Enforcement\" enabled. To verify if you have Endpoint Traffic Policy Enforcement enabled:\n\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Endpoint Traffic Policy Enforcement \u003e (Option not set to: \u201cNo\u201d)"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tan Cheng Ghee of OCBC Bank"
        }
      ],
      "datePublic": "2025-06-11T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An improper access control vulnerability in the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement\"\u003eEndpoint Traffic Policy Enforcement\u003c/a\u003e feature of the Palo Alto Networks GlobalProtect\u2122 app allows certain packets to remain unencrypted instead of being properly secured within the tunnel.\u003cbr\u003e\u003cbr\u003eAn attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute.\u0026nbsp;"
            }
          ],
          "value": "An improper access control vulnerability in the  Endpoint Traffic Policy Enforcement https://docs.paloaltonetworks.com/globalprotect/6-0/globalprotect-app-new-features/new-features-released-in-gp-app/endpoint-traffic-policy-enforcement  feature of the Palo Alto Networks GlobalProtect\u2122 app allows certain packets to remain unencrypted instead of being properly secured within the tunnel.\n\nAn attacker with physical access to the network can inject rogue devices to intercept these packets. Under normal operating conditions, the GlobalProtect app automatically recovers from this interception within one minute."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-117",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-117: Interception"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "PHYSICAL",
            "baseScore": 1,
            "baseSeverity": "LOW",
            "privilegesRequired": "NONE",
            "providerUrgency": "GREEN",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:L/U:Green",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "LOW"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-319",
              "description": "CWE-319 Cleartext Transmission of Sensitive Information",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-13T05:50:52.280Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-4227"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "1. Upgrade the GlobalProtect App to one of the unaffected versions:\u003cbr\u003e\u003cbr\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on Windows, macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.3\u003cbr\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eNo solution available. A 6.3.3 hotfix is planned. (ETA: 12 June 2025).\u003cbr\u003eUpgrade to 6.3.2-566 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows, macOS\u003c/td\u003e\u003ctd\u003e6.2.0\u0026nbsp;through 6.2.8-223\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later. A new hotfix for 6.2.8 is planned. (ETA: June 2025).\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows, macOS\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows, macOS\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.2-566 or later.\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux, Android, iOS, Chrome OS, UWP\u003c/td\u003e\u003ctd\u003eAll\u003c/td\u003e\u003ctd\u003eNot applicable.\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cbr\u003e2. Ensure that \"Endpoint Traffic Policy Enforcement\" is set to \u201cAll Traffic\u201d under the GlobalProtect App Configurations.\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Endpoint Traffic Policy Enforcement (Select: All Traffic)\u003cbr\u003e\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e3. GlobalProtect Portal: Enable \"Allow Gateway Access from GlobalProtect Only\" (Requires Content version 8977 or newer). This must be enabled in conjunction with \"Endpoint Traffic Policy Enforcement\" under the GlobalProtect App Configurations.\u003cbr\u003e\u003cul\u003e\u003cli\u003eNetwork \u003cb\u003e\u0026gt;\u003c/b\u003e GlobalProtect \u003cb\u003e\u0026gt;\u003c/b\u003e Portals \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Portal configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e Agent tab \u003cb\u003e\u0026gt;\u003c/b\u003e (Open Agent configuration) \u003cb\u003e\u0026gt;\u003c/b\u003e App tab \u003cb\u003e\u0026gt;\u003c/b\u003e App Configurations \u003cb\u003e\u0026gt;\u003c/b\u003e  Allow Gateway Access from GlobalProtect Only (Select: Yes)\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e4. Commit your configuration."
            }
          ],
          "value": "1. Upgrade the GlobalProtect App to one of the unaffected versions:\n\nVersion\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on Windows, macOS\n\n                                    6.3.3\n6.3.0 through 6.3.2\n                                    No solution available. A 6.3.3 hotfix is planned. (ETA: 12 June 2025).\nUpgrade to 6.3.2-566 or later.\n                                GlobalProtect App 6.2 on Windows, macOS6.2.0\u00a0through 6.2.8-223Upgrade to 6.3.2-566 or later. A new hotfix for 6.2.8 is planned. (ETA: June 2025).\nGlobalProtect App 6.1 on Windows, macOSAllUpgrade to 6.3.2-566 or later.\nGlobalProtect App 6.0 on Windows, macOSAllUpgrade to 6.3.2-566 or later.\nGlobalProtect App on Linux, Android, iOS, Chrome OS, UWPAllNot applicable.\n2. Ensure that \"Endpoint Traffic Policy Enforcement\" is set to \u201cAll Traffic\u201d under the GlobalProtect App Configurations.\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Endpoint Traffic Policy Enforcement (Select: All Traffic)\n\n\n\n\n3. GlobalProtect Portal: Enable \"Allow Gateway Access from GlobalProtect Only\" (Requires Content version 8977 or newer). This must be enabled in conjunction with \"Endpoint Traffic Policy Enforcement\" under the GlobalProtect App Configurations.\n  *  Network \u003e GlobalProtect \u003e Portals \u003e (Open Portal configuration) \u003e Agent tab \u003e (Open Agent configuration) \u003e App tab \u003e App Configurations \u003e  Allow Gateway Access from GlobalProtect Only (Select: Yes)\n\n\n\n4. Commit your configuration."
        }
      ],
      "source": {
        "defect": [
          "GPC-22460"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-11T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ch3\u003eAvailable Mitigation when solution interferes with\u0026nbsp;Autonomous Digital Experience Management (ADEM)\u003c/h3\u003e\u003cul\u003e\u003cli\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e functionality depends on ICMP probes that must be sent outside of the secure tunnel. When \"Allow Gateway Access from GlobalProtect Only\" is set to \"Yes\" and \"Endpoint Traffic Policy Enforcement\" is configured as \"All Traffic,\" these \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e probes will fail because they are forcefully transmitted through the encrypted tunnel rather than via their required direct path.\u003c/li\u003e\u003cli\u003eThis issue can be addressed by changing \"Endpoint Traffic Policy Enforcement\" to \"All TCP/UDP Traffic.\" This adjustment prevents interception of TCP and UDP traffic while allowing \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem\"\u003eADEM\u003c/a\u003e probes to function properly. However, this configuration still permits ICMP, and other non-TCP/UDP traffic to be intercepted.\u0026nbsp;\u003cbr\u003e\u003c/li\u003e\u003c/ul\u003e"
            }
          ],
          "value": "Available Mitigation when solution interferes with\u00a0Autonomous Digital Experience Management (ADEM)  *   ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  functionality depends on ICMP probes that must be sent outside of the secure tunnel. When \"Allow Gateway Access from GlobalProtect Only\" is set to \"Yes\" and \"Endpoint Traffic Policy Enforcement\" is configured as \"All Traffic,\" these  ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  probes will fail because they are forcefully transmitted through the encrypted tunnel rather than via their required direct path.\n  *  This issue can be addressed by changing \"Endpoint Traffic Policy Enforcement\" to \"All TCP/UDP Traffic.\" This adjustment prevents interception of TCP and UDP traffic while allowing  ADEM https://docs.paloaltonetworks.com/autonomous-dem/administration/autonomous-dem  probes to function properly. However, this configuration still permits ICMP, and other non-TCP/UDP traffic to be intercepted."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-4227",
    "datePublished": "2025-06-13T05:50:52.280Z",
    "dateReserved": "2025-05-02T19:10:39.630Z",
    "dateUpdated": "2025-06-23T16:06:55.397Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-4232 (GCVE-0-2025-4232)

Vulnerability from cvelistv5 – Published: 2025-06-12 23:22 – Updated: 2026-02-26 17:50

Title

GlobalProtect: Authenticated Code Injection Through Wildcard on macOS

Summary

An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.

Severity

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-06-14 03:56 UTC

CWE

CWE-155 - Improper Neutralization of Wildcards or Matching Symbols

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-4232	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8-h2 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::macOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::macOS::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:::::ChromeOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Windows:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Linux:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::Android:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::iOS:: cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:::::ChromeOS::

Date Public

2025-06-11 16:00

Credits

Rutger Flohil

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-4232",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-06-14T03:56:19.829250Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T17:50:39.870Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:macOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:macOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8-h2",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8-h2",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.1.0:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:ChromeOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Linux:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Android:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:iOS:*:*",
            "cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:ChromeOS:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "Android",
            "iOS",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo special configuration is required to be affected by this issue.\u003c/span\u003e"
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Rutger Flohil"
        }
      ],
      "datePublic": "2025-06-11T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eAn improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect\u2122 app on macOS allows a non administrative user to escalate their privileges to root.\u003c/p\u003e"
            }
          ],
          "value": "An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect\u2122 app on macOS allows a non administrative user to escalate their privileges to root."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-155",
              "description": "CWE-155: Improper Neutralization of Wildcards or Matching Symbols",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-06-12T23:22:34.993Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-4232"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable class=\"tbl\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eMinor Version\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\n                                    \u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\n                                    \u003ctd\u003e6.3.0 through 6.3.2\u003c/td\u003e\n                                    \u003ctd\u003eUpgrade to 6.3.3 or later.\u003c/td\u003e\n                                \u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003c/td\u003e\u003ctd\u003e6.2.0 through 6.2.8-h2\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or\u0026nbsp;6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003e\u003c/td\u003e\u003ctd\u003eNo action needed.\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Chrome OS\u003c/td\u003e\u003ctd\u003e\u0026nbsp;\u003c/td\u003e\u003ctd\u003eNo action needed.\u0026nbsp;\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nMinor Version\nSuggested Solution\n\n                                    GlobalProtect App 6.3 on macOS\n\n                                    6.3.0 through 6.3.2\n                                    Upgrade to 6.3.3 or later.\n                                GlobalProtect App 6.2 on macOS6.2.0 through 6.2.8-h2Upgrade to 6.2.8-h2 [ETA June 2025] or\u00a06.3.3 or later.GlobalProtect App 6.1 on macOSUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.GlobalProtect App 6.0 on macOSUpgrade to 6.2.8-h2 [ETA June 2025] or 6.3.3 or later.GlobalProtect App on Windows\nNo action needed.GlobalProtect App on Linux\nNo action needed.GlobalProtect App on Android\nNo action needed.GlobalProtect App on iOS\nNo action needed.GlobalProtect App on Chrome OS\u00a0No action needed."
        }
      ],
      "source": {
        "defect": [
          "GPC-21969"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-06-11T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect: Authenticated Code Injection Through Wildcard on macOS",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan\u003eNo workaround or mitigation is available.\u003c/span\u003e"
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.7",
        "GlobalProtect App 6.1.6",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.11",
        "GlobalProtect App 6.0.10",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-4232",
    "datePublished": "2025-06-12T23:22:34.993Z",
    "dateReserved": "2025-05-02T19:10:45.457Z",
    "dateUpdated": "2026-02-26T17:50:39.870Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-0135 (GCVE-0-2025-0135)

Vulnerability from cvelistv5 – Published: 2025-05-14 18:08 – Updated: 2025-05-14 20:50

Title

GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App

Summary

An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

Severity

5.2 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-14 20:50 UTC

CWE

CWE-266 - Incorrect Privilege Assignment

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0135	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-05-14 16:00

Credits

Alex Bourla (alex.bourla@form3.tech) Graham Brereton (graham.brereton@form3.tech)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0135",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-14T20:50:14.792647Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-14T20:50:20.200Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Android",
            "Chrome OS",
            "iOS",
            "Windows",
            "Linux"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be vulnerable to this issue."
            }
          ],
          "value": "No special configuration is required to be vulnerable to this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Alex Bourla (alex.bourla@form3.tech)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Graham Brereton (graham.brereton@form3.tech)"
        }
      ],
      "datePublic": "2025-05-14T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app.\u003cbr\u003e\u003cbr\u003eThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
            }
          ],
          "value": "An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect\u2122 App on macOS devices enables a locally authenticated non administrative user to disable the app.\n\nThe GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-578",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-578 Disable Security Software"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-266",
              "description": "CWE-266: Incorrect Privilege Assignment",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-14T18:08:32.924Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0135"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on macOS\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Windows\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNot Applicable\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e\u003cp\u003e\u003cbr\u003e\u003c/p\u003e"
            }
          ],
          "value": "Version\nSuggested Solution\nGlobalProtect App 6.3 on macOS\nUpgrade to 6.3.3 or later\nGlobalProtect App 6.2 on macOS\nUpgrade to 6.2.8 or later\nGlobalProtect App 6.1 on macOS\nUpgrade to 6.2.8 or later or 6.3.3 or later\nGlobalProtect App 6.0 on macOS\nUpgrade to 6.2.8 or later or 6.3.3 or later\nGlobalProtect App on LinuxNot ApplicableGlobalProtect App on WindowsNot ApplicableGlobalProtect App on iOSNot ApplicableGlobalProtect App on AndroidNot ApplicableGlobalProtect UWP AppNot Applicable"
        }
      ],
      "source": {
        "defect": [
          "GPC-21582"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-05-14T16:00:00.000Z",
          "value": "Initial Publication"
        }
      ],
      "title": "GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0135",
    "datePublished": "2025-05-14T18:08:32.924Z",
    "dateReserved": "2024-12-20T23:24:28.176Z",
    "dateUpdated": "2025-05-14T20:50:20.200Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0120 (GCVE-0-2025-0120)

Vulnerability from cvelistv5 – Published: 2025-04-11 01:44 – Updated: 2025-05-02 19:08

Title

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Summary

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Severity

7.1 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-04-11 15:47 UTC

CWE

CWE-250 - Execution with Unnecessary Privileges

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0120	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Affected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.8 (custom) Affected: 6.1.0 (custom) Affected: 6.0.0 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-04-09 16:00

Credits

Maxime ESCOURBIAC, Michelin CERT Yassine BENGANA, Abicom for Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0120",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-11T15:47:44.551607Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-11T16:02:44.112Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "affected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.8",
                  "status": "unaffected"
                },
                {
                  "at": "6.2.7-1077",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.8",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.3.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No special configuration is required to be affected by this issue."
            }
          ],
          "value": "No special configuration is required to be affected by this issue."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime ESCOURBIAC, Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yassine BENGANA, Abicom for Michelin CERT"
        }
      ],
      "datePublic": "2025-04-09T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit."
            }
          ],
          "value": "A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect\u2122 app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "HIGH",
            "subConfidentialityImpact": "HIGH",
            "subIntegrityImpact": "HIGH",
            "userInteraction": "NONE",
            "valueDensity": "CONCENTRATED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "A local Windows user (or malware) with non-administrative rights elevates their privileges to NT AUTHORITY/SYSTEM."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250 Execution with Unnecessary Privileges",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-02T19:08:27.987Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0120"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.7-1077 or 6.2.8 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Version\nSuggested Solution\nGlobalProtect App 6.3 on WindowsUpgrade to 6.3.3 or laterGlobalProtect App 6.2 on Windows\nUpgrade to 6.2.7-1077 or 6.2.8 or later\nGlobalProtect App 6.1 on Windows\nUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\nGlobalProtect App 6.0 on Windows\nUpgrade to 6.2.8 or later or upgrade to 6.3.3 or later\nGlobalProtect App on macOSNo action neededGlobalProtect App on LinuxNo action neededGlobalProtect App on iOSNo action neededGlobalProtect App on AndroidNo action neededGlobalProtect UWP AppNo action needed"
        }
      ],
      "source": {
        "defect": [
          "GPC-19862",
          "GPC-19858"
        ],
        "discovery": "EXTERNAL"
      },
      "timeline": [
        {
          "lang": "en",
          "time": "2025-04-09T16:00:00.000Z",
          "value": "Initial Publication"
        },
        {
          "lang": "en",
          "time": "2025-05-02T19:00:00.000Z",
          "value": "Updated the fix version for 6.2.7"
        }
      ],
      "title": "GlobalProtect App: Local Privilege Escalation (PE) Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "No workaround or mitigation is available."
            }
          ],
          "value": "No workaround or mitigation is available."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.3.2",
        "GlobalProtect App 6.3.1",
        "GlobalProtect App 6.3.0",
        "GlobalProtect App 6.3",
        "GlobalProtect App 6.2.7",
        "GlobalProtect App 6.2.6",
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0120",
    "datePublished": "2025-04-11T01:44:48.253Z",
    "dateReserved": "2024-12-20T23:23:21.499Z",
    "dateUpdated": "2025-05-02T19:08:27.987Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2025-0118 (GCVE-0-2025-0118)

Vulnerability from cvelistv5 – Published: 2025-03-12 18:36 – Updated: 2025-03-12 18:52

Title

GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability

Summary

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.

Severity

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-03-12 18:48 UTC

CWE

CWE-618 - Exposed Unsafe ActiveX Method

Assigner

palo_alto mitre root

References

1 reference

URL	Tags
https://security.paloaltonetworks.com/CVE-2025-0118	vendor-advisory

Impacted products

3 products

Vendor	Product	Version
Palo Alto Networks	GlobalProtect App	Unaffected: 6.3.0 , < 6.3.3 (custom) Affected: 6.2.0 , < 6.2.5 (custom) Affected: 6.1.0 , < 6.1.6 (custom) Affected: 6.0.0 , < 6.0.11 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-::::::
Palo Alto Networks	GlobalProtect App	Unaffected: All , < 6.3.3 (custom) cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:::::: cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-::::::
Palo Alto Networks	GlobalProtect UWP App	Unaffected: All (custom)

Date Public

2025-03-12 16:00

Credits

Maxime ESCOURBIAC, Michelin CERT Yassine BENGANA, Abicom for Michelin CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0118",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-03-12T18:48:05.801831Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-12T18:52:08.115Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "unaffected",
              "version": "6.3.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.2.5",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.2.5",
              "status": "affected",
              "version": "6.2.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.1.6",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.1.6",
              "status": "affected",
              "version": "6.1.0",
              "versionType": "custom"
            },
            {
              "changes": [
                {
                  "at": "6.0.11",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.0.11",
              "status": "affected",
              "version": "6.0.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.1.0:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.8:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.7:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.6:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.5:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.4:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.3:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.2:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.1:-:*:*:*:*:*:*",
            "cpe:2.3:a:paloaltonetworks:globalprotect_app:6.0.0:-:*:*:*:*:*:*"
          ],
          "defaultStatus": "unaffected",
          "platforms": [
            "macOS",
            "Linux",
            "iOS",
            "Android",
            "Chrome OS"
          ],
          "product": "GlobalProtect App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "changes": [
                {
                  "at": "6.3.3",
                  "status": "unaffected"
                }
              ],
              "lessThan": "6.3.3",
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GlobalProtect UWP App",
          "vendor": "Palo Alto Networks",
          "versions": [
            {
              "status": "unaffected",
              "version": "All",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "You are vulnerable to this issue only if you configured GlobalProtect authentication to use SAML authentication.\u003cbr\u003e\u003cbr\u003eYou can verify whether you configured SAML authentication on your GlobalProtect portals by checking your firewall web interface (\u003cb\u003eNetwork\u003c/b\u003e \u0026gt; \u003cb\u003eGlobalProtect\u003c/b\u003e \u0026gt; \u003cb\u003ePortals\u003c/b\u003e \u0026gt; (portal-config) \u0026gt; \u003cb\u003eAuthentication\u003c/b\u003e)."
            }
          ],
          "value": "You are vulnerable to this issue only if you configured GlobalProtect authentication to use SAML authentication.\n\nYou can verify whether you configured SAML authentication on your GlobalProtect portals by checking your firewall web interface (Network \u003e GlobalProtect \u003e Portals \u003e (portal-config) \u003e Authentication)."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Maxime ESCOURBIAC, Michelin CERT"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Yassine BENGANA, Abicom for Michelin CERT"
        }
      ],
      "datePublic": "2025-03-12T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device.\u003cbr\u003e\u003cbr\u003eThis issue does not apply to the GlobalProtect app on other (non-Windows) platforms.\u0026nbsp;"
            }
          ],
          "value": "A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device.\n\nThis issue does not apply to the GlobalProtect app on other (non-Windows) platforms."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
            }
          ],
          "value": "Palo Alto Networks is not aware of any malicious exploitation of this issue."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-104",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-104 Cross Zone Scripting"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "LOW",
            "subIntegrityImpact": "LOW",
            "userInteraction": "ACTIVE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "An attacker deceives an authenticated Windows user and entices the user to navigate to a malicious web page during the GlobalProtect SAML login process."
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-618",
              "description": "CWE-618 Exposed Unsafe ActiveX Method",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-03-12T18:46:41.580Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.paloaltonetworks.com/CVE-2025-0118"
        }
      ],
      "solutions": [
        {
          "lang": "eng",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "The issue is addressed by hardening the browser embedded in GlobalProtect app to disallow ActiveX plugins. This security enhancement is implemented in patched versions of the GlobalProtect app, so upgrading resolves the issue.\u0026nbsp;\u003cbr\u003e\u003cbr\u003e\u003ctable\u003e\u003cthead\u003e\u003ctr\u003e\u003cth\u003eVersion\u003cbr\u003e\u003c/th\u003e\u003cth\u003eSuggested Solution\u003cbr\u003e\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.3 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.3.3 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.2 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.2.5 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.1 on Windows\u003c/td\u003e\u003ctd\u003eUpgrade to 6.1.6 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App 6.0 on Windows\u003cbr\u003e\u003c/td\u003e\u003ctd\u003eUpgrade to 6.0.11 or later\u003cbr\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on macOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Linux\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on iOS\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect App on Android\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003eGlobalProtect UWP App\u003c/td\u003e\u003ctd\u003eNo action needed\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "The issue is addressed by hardening the browser embedded in GlobalProtect app to disallow ActiveX plugins. This security enhancement is implemented in patched versions of the GlobalProtect app, so upgrading resolves the issue.\u00a0\n\nVersion\nSuggested Solution\nGlobalProtect App 6.3 on Windows\nUpgrade to 6.3.3 or later\nGlobalProtect App 6.2 on Windows\nUpgrade to 6.2.5 or later\nGlobalProtect App 6.1 on WindowsUpgrade to 6.1.6 or later\nGlobalProtect App 6.0 on Windows\nUpgrade to 6.0.11 or later\nGlobalProtect App on macOSNo action neededGlobalProtect App on LinuxNo action neededGlobalProtect App on iOSNo action neededGlobalProtect App on AndroidNo action neededGlobalProtect UWP AppNo action needed"
        }
      ],
      "source": {
        "defect": [
          "GPC-19859"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "You can mitigate this issue by using a different form of authentication for the GlobalProtect portal such as Client Certificate Authentication, RADIUS, TACACS+, LDAP, or Kerberos. You can find information about configuring authentication for the GlobalProtect portal in this \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-authentication-configuration-tab\"\u003edocumentation\u003c/a\u003e."
            }
          ],
          "value": "You can mitigate this issue by using a different form of authentication for the GlobalProtect portal such as Client Certificate Authentication, RADIUS, TACACS+, LDAP, or Kerberos. You can find information about configuring authentication for the GlobalProtect portal in this  documentation https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-web-interface-help/globalprotect/network-globalprotect-portals/globalprotect-portals-authentication-configuration-tab ."
        }
      ],
      "x_affectedList": [
        "GlobalProtect App 6.2.4",
        "GlobalProtect App 6.2.3",
        "GlobalProtect App 6.2.2",
        "GlobalProtect App 6.2.1",
        "GlobalProtect App 6.2.0",
        "GlobalProtect App 6.2",
        "GlobalProtect App 6.1.5",
        "GlobalProtect App 6.1.4",
        "GlobalProtect App 6.1.3",
        "GlobalProtect App 6.1.2",
        "GlobalProtect App 6.1.1",
        "GlobalProtect App 6.1.0",
        "GlobalProtect App 6.1",
        "GlobalProtect App 6.0.8",
        "GlobalProtect App 6.0.7",
        "GlobalProtect App 6.0.6",
        "GlobalProtect App 6.0.5",
        "GlobalProtect App 6.0.4",
        "GlobalProtect App 6.0.3",
        "GlobalProtect App 6.0.2",
        "GlobalProtect App 6.0.1",
        "GlobalProtect App 6.0.0",
        "GlobalProtect App 6.0"
      ],
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2025-0118",
    "datePublished": "2025-03-12T18:36:44.290Z",
    "dateReserved": "2024-12-20T23:23:19.630Z",
    "dateUpdated": "2025-03-12T18:52:08.115Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

VAR-202405-0458

Vulnerability from variot - Updated: 2025-01-15 23:06

DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-202405-0458",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "7.2.5"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "15.1.0"
      },
      {
        "model": "client connector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "zscaler",
        "version": "4.2.0.282"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "17.1.2"
      },
      {
        "model": "client connector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "zscaler",
        "version": "3.7.0.134"
      },
      {
        "model": "ipsec mobile vpn client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "watchguard",
        "version": "*"
      },
      {
        "model": "forticlient",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "fortinet",
        "version": "7.4.0"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "17.1.0"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "15.1.10"
      },
      {
        "model": "globalprotect",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "paloaltonetworks",
        "version": "*"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "16.1.5"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "7.2.3"
      },
      {
        "model": "client connector",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "zscaler",
        "version": "3.7"
      },
      {
        "model": "client connector",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "zscaler",
        "version": "1.5.1.25"
      },
      {
        "model": "secure client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "forticlient",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "fortinet",
        "version": "7.2.5"
      },
      {
        "model": "mobile vpn with ssl",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "watchguard",
        "version": "*"
      },
      {
        "model": "anyconnect vpn client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": null
      },
      {
        "model": "secure access client",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "citrix",
        "version": "24.06.1"
      },
      {
        "model": "big-ip access policy manager",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "f5",
        "version": "16.1.0"
      },
      {
        "model": "client connector",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "zscaler",
        "version": null
      },
      {
        "model": "forticlient",
        "scope": "gte",
        "trust": 1.0,
        "vendor": "fortinet",
        "version": "6.4.0"
      },
      {
        "model": "secure access client",
        "scope": "lt",
        "trust": 1.0,
        "vendor": "citrix",
        "version": "24.8.5"
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "cve": "CVE-2024-3661",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [],
        "cvssV3": [
          {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT",
            "author": "9119a7d8-5eab-497f-8521-727c672e3725",
            "availabilityImpact": "LOW",
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "exploitabilityScore": 2.8,
            "id": "CVE-2024-3661",
            "impactScore": 4.7,
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "trust": 2.0,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          }
        ],
        "severity": [
          {
            "author": "9119a7d8-5eab-497f-8521-727c672e3725",
            "id": "CVE-2024-3661",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2024-3661",
            "trust": 1.0,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      },
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "DHCP can add routes to a client\u2019s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN.",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ],
    "trust": 1.0
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "id": "VAR-202405-0458",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VARIoT devices database",
        "id": null
      }
    ],
    "trust": 0.7222222
  },
  "last_update_date": "2025-01-15T23:06:15.378000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-501",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-306",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.0,
        "url": "https://datatracker.ietf.org/doc/html/rfc2131#section-7"
      },
      {
        "trust": 1.0,
        "url": "https://www.leviathansecurity.com/research/tunnelvision"
      },
      {
        "trust": 1.0,
        "url": "https://news.ycombinator.com/item?id=40284111"
      },
      {
        "trust": 1.0,
        "url": "https://fortiguard.fortinet.com/psirt/fg-ir-24-170"
      },
      {
        "trust": 1.0,
        "url": "https://bst.cisco.com/quickview/bug/cscwk05814"
      },
      {
        "trust": 1.0,
        "url": "https://lowendtalk.com/discussion/188857/a-rogue-dhcp-server-within-your-network-can-and-will-hijack-your-vpn-traffic"
      },
      {
        "trust": 1.0,
        "url": "https://mullvad.net/en/blog/evaluating-the-impact-of-tunnelvision"
      },
      {
        "trust": 1.0,
        "url": "https://tunnelvisionbug.com/"
      },
      {
        "trust": 1.0,
        "url": "https://security.paloaltonetworks.com/cve-2024-3661"
      },
      {
        "trust": 1.0,
        "url": "https://www.agwa.name/blog/post/hardening_openvpn_for_def_con"
      },
      {
        "trust": 1.0,
        "url": "https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/"
      },
      {
        "trust": 1.0,
        "url": "https://issuetracker.google.com/issues/263721377"
      },
      {
        "trust": 1.0,
        "url": "https://www.theregister.com/2024/05/07/vpn_tunnelvision_dhcp/"
      },
      {
        "trust": 1.0,
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00009"
      },
      {
        "trust": 1.0,
        "url": "https://news.ycombinator.com/item?id=40279632"
      },
      {
        "trust": 1.0,
        "url": "https://support.citrix.com/article/ctx677069/cloud-software-group-security-advisory-for-cve20243661"
      },
      {
        "trust": 1.0,
        "url": "https://krebsonsecurity.com/2024/05/why-your-vpn-may-not-be-as-secure-as-it-claims/"
      },
      {
        "trust": 1.0,
        "url": "https://www.zscaler.com/blogs/security-research/cve-2024-3661-k-tunnelvision-exposes-vpn-bypass-vulnerability"
      },
      {
        "trust": 1.0,
        "url": "https://my.f5.com/manage/s/article/k000139553"
      },
      {
        "trust": 1.0,
        "url": "https://datatracker.ietf.org/doc/html/rfc3442#section-7"
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2024-05-06T19:15:11.027000",
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2025-01-15T16:50:28.667000",
        "db": "NVD",
        "id": "CVE-2024-3661"
      }
    ]
  }
}

Find a vulnerability

Search criteria

87 vulnerabilities found for globalprotect by paloaltonetworks

CVE-2026-0299 (GCVE-0-2026-0299)

CVE-2026-0298 (GCVE-0-2026-0298)

CVE-2026-0297 (GCVE-0-2026-0297)

CVE-2026-0296 (GCVE-0-2026-0296)

CVE-2026-0295 (GCVE-0-2026-0295)

CVE-2026-0267 (GCVE-0-2026-0267)

CVE-2026-0251 (GCVE-0-2026-0251)

CVE-2026-0250 (GCVE-0-2026-0250)

CVE-2026-0249 (GCVE-0-2026-0249)

CVE-2025-4227 (GCVE-0-2025-4227)

CVE-2025-4232 (GCVE-0-2025-4232)

CVE-2025-0135 (GCVE-0-2025-0135)

CVE-2025-0120 (GCVE-0-2025-0120)

CVE-2025-0118 (GCVE-0-2025-0118)

CVE-2024-5921 (GCVE-0-2024-5921)

CVE-2026-0299 (GCVE-0-2026-0299)

CVE-2026-0298 (GCVE-0-2026-0298)

CVE-2026-0297 (GCVE-0-2026-0297)

CVE-2026-0296 (GCVE-0-2026-0296)

CVE-2026-0295 (GCVE-0-2026-0295)

CVE-2026-0267 (GCVE-0-2026-0267)

CVE-2026-0249 (GCVE-0-2026-0249)

CVE-2026-0250 (GCVE-0-2026-0250)

CVE-2026-0251 (GCVE-0-2026-0251)

CVE-2025-4227 (GCVE-0-2025-4227)

CVE-2025-4232 (GCVE-0-2025-4232)

CVE-2025-0135 (GCVE-0-2025-0135)

CVE-2025-0120 (GCVE-0-2025-0120)

CVE-2025-0118 (GCVE-0-2025-0118)

VAR-202405-0458