Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductGlobalprotect App (cb13a2b8-b9c2-555f-b4d7-c9a58e5128b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0267 not_vulnerable 2026-07-29 00:20:49.861209 GlobalProtect App: Information Exposure Vulnerability on macOS
An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.
Published: 2026-06-10T20:31:37.320Z
Updated: 2026-06-11T14:41:21.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0250 not_vulnerable 2026-06-08 07:47:11.215730 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
Published: 2026-05-13T18:26:51.927Z
Updated: 2026-05-14T03:56:37.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0250 vulnerable 2026-06-08 07:47:11.214051 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
Published: 2026-05-13T18:26:51.927Z
Updated: 2026-05-14T03:56:37.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0249 not_vulnerable 2026-06-08 07:47:11.204921 GlobalProtect App: Certificate Validation Bypass Vulnerabilities
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.
Published: 2026-05-13T18:32:12.091Z
Updated: 2026-05-15T09:57:30.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0249 vulnerable 2026-06-08 07:47:11.204866 GlobalProtect App: Certificate Validation Bypass Vulnerabilities
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.
Published: 2026-05-13T18:32:12.091Z
Updated: 2026-05-15T09:57:30.206Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2183 not_vulnerable 2026-06-08 07:16:56.323145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2179 not_vulnerable 2026-06-08 07:16:56.213726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0141 not_vulnerable 2026-06-08 07:00:29.715245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0140 not_vulnerable 2026-06-08 07:00:29.693271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8687 vulnerable 2026-06-08 07:00:25.393596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5921 not_vulnerable 2026-06-08 06:56:18.011118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5921 vulnerable 2026-06-08 06:56:18.010971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5915 vulnerable 2026-06-08 06:56:17.763231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5908 vulnerable 2026-06-08 06:56:17.743132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2432 vulnerable 2026-06-08 06:33:31.102397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2431 vulnerable 2026-06-08 06:33:31.099245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0009 not_vulnerable 2026-06-08 05:52:03.885519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0006 vulnerable 2026-06-08 05:52:03.876863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0021 not_vulnerable 2026-06-08 05:39:09.128006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0021 vulnerable 2026-06-08 05:39:09.127963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0019 vulnerable 2026-06-08 05:39:09.113713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0018 not_vulnerable 2026-06-08 05:39:09.112848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0018 vulnerable 2026-06-08 05:39:09.112681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0017 not_vulnerable 2026-06-08 05:39:09.111701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0017 vulnerable 2026-06-08 05:39:09.111663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0016 not_vulnerable 2026-06-08 05:39:09.109208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0016 vulnerable 2026-06-08 05:39:09.109147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3057 vulnerable 2026-06-08 05:33:50.761051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3038 vulnerable 2026-06-08 05:33:50.724420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2033 vulnerable 2026-06-08 05:24:58.773225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2032 vulnerable 2026-06-08 05:24:58.772631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2004 not_vulnerable 2026-06-08 05:24:58.732790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2004 vulnerable 2026-06-08 05:24:58.732730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.