What’s Vulnerable › Vulnerabilities

CVE-2019-17435

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-16 · updated 2026-06-17

Description

A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.

Affected products

• Palo Alto Networks GlobalProtect App: through 5.0.3; through 4.1.12
• Palo Alto Networks GlobalProtect App: through 5.0.3; through 4.1.12

References

• https://security.paloaltonetworks.com/CVE-2019-17435
• https://security.paloaltonetworks.com/CVE-2019-17435

Get alerted when CVE-2019-17435 or the next vulnerability affects your stack