Palo Alto Networks GlobalProtect App

• CVE-2026-0314 Medium 4.3 GlobalProtect App: Local Denial of Service (DoS) on Windows <0.1%
• CVE-2026-0315 Medium 5.9 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS 0.1%
• CVE-2026-0307 Medium 5.9 GlobalProtect App: Local Privilege Escalation Vulnerabilities 0.2%
• CVE-2026-0299 Medium 5.9 GlobalProtect App: Local Privilege Escalation Vulnerabilities 0.2%
• CVE-2026-0298 Medium 5.2 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) 0.7%
• CVE-2026-0297 Medium 5.2 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake 0.6%
• CVE-2026-0296 Medium 4.5 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability 0.3%
• CVE-2026-0295 Medium 4.1 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS 0.1%
• CVE-2026-0267 Medium 4.4 GlobalProtect App: Information Exposure Vulnerability on macOS 0.1%
• CVE-2026-0249 Medium 4.9 GlobalProtect App: Certificate Validation Bypass Vulnerabilities 0.1%
• CVE-2026-0250 Medium 5.2 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway 0.4%
• CVE-2026-0251 Medium 5.9 GlobalProtect App: Local Privilege Escalation Vulnerabilities 0.2%
• CVE-2025-2183 Medium 5.3 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation 0.1%
• CVE-2025-2179 Medium 6.8 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App 0.1%
• CVE-2025-0141 High 8.4 GlobalProtect App: Privilege Escalation (PE) Vulnerability 0.2%
• CVE-2025-0140 Medium 6.8 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App 0.1%
• CVE-2025-4227 Low 1.0 GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement 0.2%
• CVE-2025-4232 High 8.5 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS 0.5%
• CVE-2025-0135 Medium 5.2 GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App 0.1%
• CVE-2025-0120 High 7.1 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.2%
• CVE-2025-0118 Medium 6.0 GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability 0.5%
• CVE-2025-0117 High 7.1 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.2%
• CVE-2024-5921 Medium 6.0 GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation 1.5%
• CVE-2024-9473 Medium 5.2 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.3%
• CVE-2024-8687 Medium 6.9 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes 0.4%
• CVE-2024-5915 Medium 5.2 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.2%
• CVE-2024-5908 Medium 5.5 GlobalProtect App: Encrypted Credential Exposure via Log Files 0.4%
• CVE-2024-2432 Medium 4.5 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.4%
• CVE-2024-2431 Medium 5.5 GlobalProtect App: Local User Can Disable GlobalProtect 0.2%
• CVE-2023-0009 High 7.8 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability 0.2%
• CVE-2023-0006 Medium 6.3 GlobalProtect App: Local File Deletion Vulnerability 0.1%
• CVE-2022-0021 Low 3.3 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon 0.2%
• CVE-2022-0019 Medium 4.7 GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux 0.2%
• CVE-2022-0018 Medium 6.1 GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled 0.7%
• CVE-2022-0017 High 7.0 GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation 0.3%
• CVE-2022-0016 High 7.4 GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon 0.2%
• CVE-2021-3057 High 8.1 GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway 1.4%
• CVE-2021-3038 Medium 5.5 GlobalProtect App: Windows VPN kernel driver denial of service (DoS) 0.2%
• CVE-2020-2033 Medium 5.3 GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie 0.9%
• CVE-2020-2032 High 7.0 GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade 0.2%
• CVE-2020-2004 Medium 6.8 GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs 0.3%