Globalprotect App

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*

part: a version: 6.2.3 update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductGlobalprotect App (cb13a2b8-b9c2-555f-b4d7-c9a58e5128b1)
Edition*
Language*
Software edition*
Target softwareWindows
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0299 vulnerable 2026-09-16 04:33:33.486922 GlobalProtect App: Local Privilege Escalation Vulnerabilities
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:04:07.275Z
Updated: 2026-08-13T13:21:02.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0298 vulnerable 2026-09-16 04:33:32.894117 GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T02:02:47.196Z
Updated: 2026-08-13T13:20:48.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0296 vulnerable 2026-09-16 04:33:31.835640 GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.
Published: 2026-08-13T01:59:45.972Z
Updated: 2026-08-13T13:29:46.735Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0297 vulnerable 2026-09-16 04:33:31.257482 GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).
Published: 2026-08-13T02:01:13.682Z
Updated: 2026-08-13T13:20:35.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4232 not_vulnerable 2026-06-08 07:29:15.869824 GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non administrative user to escalate their privileges to root.
Published: 2025-06-12T23:22:34.993Z
Updated: 2026-02-26T17:50:39.870Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4227 vulnerable 2026-06-08 07:29:15.621687 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2183 vulnerable 2026-06-08 07:16:56.284108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.