What’s Vulnerable › Products
Palo Alto Networks GlobalProtect App vulnerabilities
51 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 23 published in the last 12 months.
Check whether your Palo Alto Networks GlobalProtect App version is affected
Latest Palo Alto Networks GlobalProtect App vulnerabilities
- CVE-2026-0315 — GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (CVSS 5.9)
- CVE-2026-0314 — GlobalProtect App: Local Denial of Service (DoS) on Windows (CVSS 4.3)
- CVE-2026-0307 — GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 5.9)
- CVE-2026-0299 — GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 7.8)
- CVE-2026-0298 — GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) (CVSS 8.1)
- CVE-2026-0297 — GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake (CVSS 8.1)
- CVE-2026-0296 — GlobalProtect App: Improper Certificate Validation Bypass Vulnerability (CVSS 7.4)
- CVE-2026-0295 — GlobalProtect App: Local Privilege Escalation via Race Condition on macOS (CVSS 7.0)
- CVE-2026-0267 — GlobalProtect App: Information Exposure Vulnerability on macOS (CVSS 5.5)
- CVE-2026-0249 — GlobalProtect App: Certificate Validation Bypass Vulnerabilities (CVSS 6.5)
- CVE-2026-0250 — GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway (CVSS 8.1)
- CVE-2026-0251 — GlobalProtect App: Local Privilege Escalation Vulnerabilities (CVSS 7.8)
- CVE-2025-2183 — GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation (CVSS 5.3)
- CVE-2025-2179 — GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8)
- CVE-2025-0141 — GlobalProtect App: Privilege Escalation (PE) Vulnerability (CVSS 8.4)
- CVE-2025-0140 — GlobalProtect App: Non Admin User Can Disable the GlobalProtect App (CVSS 6.8)
- CVE-2025-4227 — GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement (CVSS 3.5)
- CVE-2025-4232 — GlobalProtect: Authenticated Code Injection Through Wildcard on macOS (CVSS 8.8)
- CVE-2025-0135 — GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App (CVSS 3.3)
- CVE-2025-0120 — GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.0)
- CVE-2025-0117 — GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.1)
- CVE-2025-0118 — GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability (CVSS 8.0)
- CVE-2024-5921 — GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation (CVSS 8.8)
- CVE-2024-9473 — GlobalProtect App: Local Privilege Escalation (PE) Vulnerability (CVSS 7.8)
- CVE-2024-8687 — PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes (CVSS 7.1)