Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:globalprotect_uwp_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductGlobalprotect Uwp App (2e84290e-c563-53ae-baec-c4a132a17bfa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0267 not_vulnerable 2026-07-29 00:20:49.861242 GlobalProtect App: Information Exposure Vulnerability on macOS
An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.
Published: 2026-06-10T20:31:37.320Z
Updated: 2026-06-11T14:41:21.436Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0250 vulnerable 2026-06-08 07:47:11.215567 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.
Published: 2026-05-13T18:26:51.927Z
Updated: 2026-05-14T03:56:37.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2179 not_vulnerable 2026-06-08 07:16:56.215931 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, macOS, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Published: 2025-07-29T17:15:08.461Z
Updated: 2025-07-29T17:37:23.305Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0141 not_vulnerable 2026-06-08 07:00:29.715275 GlobalProtect App: Privilege Escalation (PE) Vulnerability
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on enables a locally authenticated non administrative user to escalate their privileges to root on macOS and Linux or NT AUTHORITY\SYSTEM on Windows. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Published: 2025-07-09T22:58:54.755Z
Updated: 2026-02-26T17:50:50.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0140 not_vulnerable 2026-06-08 07:00:29.693304 GlobalProtect App: Non Admin User Can Disable the GlobalProtect App
An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable the app even if the GlobalProtect app configuration would not normally permit them to do so. The GlobalProtect app on Windows, Linux, iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.
Published: 2025-07-09T22:58:28.536Z
Updated: 2025-07-30T18:02:00.810Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0135 not_vulnerable 2026-06-08 07:00:29.640076 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0120 not_vulnerable 2026-06-08 07:00:29.485874 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0118 not_vulnerable 2026-06-08 07:00:29.479358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0117 not_vulnerable 2026-06-08 07:00:29.474474 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.