Globalprotect App
Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*part: a version: 6.0.1 update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Globalprotect App (cb13a2b8-b9c2-555f-b4d7-c9a58e5128b1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | Windows |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0314 |
vulnerable | 2026-11-03 10:17:01.483646 |
GlobalProtect App: Local Denial of Service (DoS) on Windows
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Published: 2026-10-14T20:25:32.075Z
Updated: 2026-10-15T18:41:54.691Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0299 |
vulnerable | 2026-09-16 04:33:33.507838 |
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:04:07.275Z
Updated: 2026-08-13T13:21:02.891Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0298 |
vulnerable | 2026-09-16 04:33:32.906339 |
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client.
The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:02:47.196Z
Updated: 2026-08-13T13:20:48.963Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0296 |
vulnerable | 2026-09-16 04:33:31.852884 |
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted.
The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T01:59:45.972Z
Updated: 2026-08-13T13:29:46.735Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0307 |
vulnerable | 2026-09-16 04:33:31.497780 |
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges.
This GlobalProtect app on iOS, Android and ChromeOS is not impacted.
Published: 2026-09-10T05:51:53.090Z
Updated: 2026-09-11T03:56:04.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0297 |
vulnerable | 2026-09-16 04:33:31.283764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0251 |
vulnerable | 2026-06-08 07:47:11.232271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4232 |
not_vulnerable | 2026-06-08 07:29:15.883592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-4227 |
vulnerable | 2026-06-08 07:29:15.654991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-2183 |
vulnerable | 2026-06-08 07:16:56.306934 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-0141 |
vulnerable | 2026-06-08 07:00:29.714397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.