Advisories · Technology
Palo Alto Networks GlobalProtect App.
Every CVE that names Palo Alto Networks GlobalProtect App among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
GlobalProtect App: Local Denial of Service (DoS) on Windows
- Palo Alto Networks GlobalProtect App
- Memory corruption
- CVSS 5.9 Medium
GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
- Palo Alto Networks GlobalProtect App
- CWE-426
- CVSS 5.9 Medium
GlobalProtect App: Local Privilege Escalation Vulnerabilities
- Palo Alto Networks GlobalProtect App
- CWE-426
- CVSS 5.9 Medium
GlobalProtect App: Local Privilege Escalation Vulnerabilities
- Palo Alto Networks GlobalProtect App
- CWE-426
- CVSS 5.2 Medium
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
- Palo Alto Networks GlobalProtect App
- Code injection
- CVSS 5.2 Medium
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
- Palo Alto Networks GlobalProtect App
- Memory corruption
- CVSS 4.5 Medium
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
- Palo Alto Networks GlobalProtect App
- Weak cryptography or TLS
- CVSS 4.1 Medium
GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
- Palo Alto Networks GlobalProtect App
- Race condition
- CVSS 4.4 Medium
GlobalProtect App: Information Exposure Vulnerability on macOS
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Information disclosure
- CVSS 4.9 Medium
GlobalProtect App: Certificate Validation Bypass Vulnerabilities
- Palo Alto Networks GlobalProtect App
- Weak cryptography or TLS
- CVSS 5.2 Medium
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Memory corruption
- CVSS 5.9 Medium
GlobalProtect App: Local Privilege Escalation Vulnerabilities
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks Global Protect App
- CWE-426
- CVSS 5.3 Medium
GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks Global Protect UWP App
- Weak cryptography or TLS
- CVSS 6.8 Medium
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Privilege escalation
- CVSS 8.4 High
GlobalProtect App: Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- CWE-426
- CVSS 6.8 Medium
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Privilege escalation
- CVSS 1.0 Low
GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement
- Palo Alto Networks GlobalProtect App
- Weak cryptography or TLS
- CVSS 8.5 High
GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
- Palo Alto Networks GlobalProtect App
- CWE-155
- CVSS 5.2 Medium
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Privilege escalation
- CVSS 7.1 High
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- Privilege escalation
- CVSS 6.0 Medium
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- CWE-618
- CVSS 7.1 High
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Palo Alto Networks GlobalProtect UWP App
- CWE-807
- CVSS 6.0 Medium
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
- Palo Alto Networks GlobalProtect App
- Weak cryptography or TLS
- CVSS 5.2 Medium
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Privilege escalation
- CVSS 6.9 Medium
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
- Palo Alto Networks PAN-OS
- Palo Alto Networks GlobalProtect App
- Information disclosure
- CVSS 5.2 Medium
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Broken access control
- CVSS 5.5 Medium
GlobalProtect App: Encrypted Credential Exposure via Log Files
- Palo Alto Networks GlobalProtect App
- Information disclosure
- CVSS 4.5 Medium
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- Privilege escalation
- CVSS 5.5 Medium
GlobalProtect App: Local User Can Disable GlobalProtect
- Palo Alto Networks GlobalProtect App
- Privilege escalation
- CVSS 7.8 High
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
- Palo Alto Networks GlobalProtect App
- CWE-807
- CVSS 6.3 Medium
GlobalProtect App: Local File Deletion Vulnerability
- Palo Alto Networks GlobalProtect app
- Race condition
- CVSS 3.3 Low
GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon
- Palo Alto Networks GlobalProtect App
- Information disclosure
- CVSS 4.7 Medium
GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux
- Palo Alto Networks GlobalProtect App
- Hard-coded credentials
- CVSS 6.1 Medium
GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled
- Palo Alto Networks GlobalProtect App
- Information disclosure
- CVSS 7.0 High
GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation
- Palo Alto Networks GlobalProtect App
- Path traversal
- CVSS 7.4 High
GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon
- Palo Alto Networks GlobalProtect App
- CWE-703
- CVSS 8.1 High
GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway
- Palo Alto Networks GlobalProtect App
- Memory corruption
- CVSS 5.5 Medium
GlobalProtect App: Windows VPN kernel driver denial of service (DoS)
- Palo Alto Networks GlobalProtect App
- CWE-20
- CWE-248
- CVSS 5.3 Medium
GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie
- Palo Alto Networks GlobalProtect App
- Authentication bypass
- Weak cryptography or TLS
- CVSS 7.0 High
GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade
- Palo Alto Networks GlobalProtect App
- Race condition
- CVSS 6.8 Medium
GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs
- Palo Alto Networks GlobalProtect App
- CWE-534