Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductGlobalprotect App (cb13a2b8-b9c2-555f-b4d7-c9a58e5128b1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0314 not_vulnerable 2026-11-03 10:17:01.484706 GlobalProtect App: Local Denial of Service (DoS) on Windows
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Published: 2026-10-14T20:25:32.075Z
Updated: 2026-10-15T18:41:54.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0315 not_vulnerable 2026-11-03 10:17:00.821434 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.
Published: 2026-10-14T20:24:21.191Z
Updated: 2026-10-16T03:56:58.518Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0295 not_vulnerable 2026-09-16 04:33:34.515991 GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T01:57:22.394Z
Updated: 2026-08-13T13:20:22.119Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0299 not_vulnerable 2026-09-16 04:33:33.509648 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:04:07.275Z
Updated: 2026-08-13T13:21:02.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0298 not_vulnerable 2026-09-16 04:33:32.907824 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:02:47.196Z
Updated: 2026-08-13T13:20:48.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0267 not_vulnerable 2026-07-29 00:20:49.861209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0250 not_vulnerable 2026-06-08 07:47:11.215730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0250 vulnerable 2026-06-08 07:47:11.214051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0249 not_vulnerable 2026-06-08 07:47:11.204921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0249 vulnerable 2026-06-08 07:47:11.204866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2183 not_vulnerable 2026-06-08 07:16:56.323145 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2179 not_vulnerable 2026-06-08 07:16:56.213726 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0141 not_vulnerable 2026-06-08 07:00:29.715245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0140 not_vulnerable 2026-06-08 07:00:29.693271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8687 vulnerable 2026-06-08 07:00:25.393596 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5921 not_vulnerable 2026-06-08 06:56:18.011118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5921 vulnerable 2026-06-08 06:56:18.010971 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5915 vulnerable 2026-06-08 06:56:17.763231 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5908 vulnerable 2026-06-08 06:56:17.743132 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2432 vulnerable 2026-06-08 06:33:31.102397 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2431 vulnerable 2026-06-08 06:33:31.099245 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0009 not_vulnerable 2026-06-08 05:52:03.885519 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0006 vulnerable 2026-06-08 05:52:03.876863 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0021 not_vulnerable 2026-06-08 05:39:09.128006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0021 vulnerable 2026-06-08 05:39:09.127963 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0019 vulnerable 2026-06-08 05:39:09.113713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0018 not_vulnerable 2026-06-08 05:39:09.112848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0018 vulnerable 2026-06-08 05:39:09.112681 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0017 not_vulnerable 2026-06-08 05:39:09.111701 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0017 vulnerable 2026-06-08 05:39:09.111663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0016 not_vulnerable 2026-06-08 05:39:09.109208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0016 vulnerable 2026-06-08 05:39:09.109147 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3057 vulnerable 2026-06-08 05:33:50.761051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3038 vulnerable 2026-06-08 05:33:50.724420 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2033 vulnerable 2026-06-08 05:24:58.773225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2032 vulnerable 2026-06-08 05:24:58.772631 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2004 not_vulnerable 2026-06-08 05:24:58.732790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2004 vulnerable 2026-06-08 05:24:58.732730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.