Globalprotect App
Approved changes feed: RSS · Atom
cpe:2.3:a:paloaltonetworks:globalprotect_app:6.2.1:-:*:*:*:*:*:*
part: a version: 6.2.1 update: -
| Vendor | Paloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a) |
|---|---|
| Product | Globalprotect App (4b63ceb2-7a45-521c-a052-9a97f5be547c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-0135 |
not_vulnerable | 2026-06-08 07:00:29.639925 |
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app.
The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Published: 2025-05-14T18:08:32.924Z
Updated: 2025-05-14T20:50:20.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0135 |
vulnerable | 2026-06-08 07:00:29.639381 |
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app.
The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Published: 2025-05-14T18:08:32.924Z
Updated: 2025-05-14T20:50:20.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0120 |
not_vulnerable | 2026-06-08 07:00:29.485833 |
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2025-04-11T01:44:48.253Z
Updated: 2025-05-02T19:08:27.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0120 |
vulnerable | 2026-06-08 07:00:29.485353 |
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2025-04-11T01:44:48.253Z
Updated: 2025-05-02T19:08:27.987Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0118 |
not_vulnerable | 2026-06-08 07:00:29.475337 |
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device.
This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.
Published: 2025-03-12T18:36:44.290Z
Updated: 2025-03-12T18:52:08.115Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0117 |
not_vulnerable | 2026-06-08 07:00:29.472107 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0117 |
vulnerable | 2026-06-08 07:00:29.471604 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9473 |
vulnerable | 2026-06-08 07:00:28.006380 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.