Paloaltonetworks Globalprotect vulnerabilities, page 2

42 vulnerabilities

Known vulnerabilities in Paloaltonetworks Globalprotect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2HighCVE-2017-15870paloaltonetworks · globalprotectpaloaltonetworks globalprotectPalo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors involving "image path execution hijacking."EPSS0.43%7HighCVE-2024-2432palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityA privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.EPSS0.39%5.5MediumCVE-2024-2431palo alto networks · globalprotect app +1 moreGlobalProtect App: Local User Can Disable GlobalProtectAn issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to disable GlobalProtect with a passcode.EPSS0.15%7.8HighCVE-2024-9473palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityA privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.EPSS0.29%7.8HighCVE-2024-5915palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation (PE) VulnerabilityA privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges.EPSS0.21%7.5HighCVE-2024-5908palo alto networks · globalprotect app +1 moreGlobalProtect App: Encrypted Credential Exposure via Log FilesA problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.EPSS0.37%8.8HighCVE-2024-5921palo alto networks · globalprotect app +1 moreGlobalProtect App: Insufficient Certificate Validation Leads to Privilege EscalationAn insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary servers. This can enable a local non-administrative operating system user or an attacker on the same subnet to install malicious root certificates on the endpoint and subsequently install malicious software signed by the malicious root certificates on that endpoint. Please subscribe to our RSS feed https://security.paloaltonetworks.com/rss.xml to be alerted to new updates to this and other advisories.EPSS1.46%7.1HighCVE-2024-8687palo alto networks · globalprotect app +5 morePAN-OS: Cleartext Exposure of GlobalProtect Portal PasscodesAn information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.EPSS0.41%2.5LowCVE-2019-1573palo alto networks · globalprotect agent +1 moreInformation Disclosure in GlobalProtect AgentGlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the end-user account and gained the ability to inspect memory, to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.EPSS0.27%5.5MediumCVE-2019-17435palo alto networks · globalprotect agent for windows +1 morepalo alto networks globalprotect agent for windowsA Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and earlier, in which the auto-update feature can allow for modification of a GlobalProtect Agent MSI installer package on disk before installation.EPSS0.29%7.1HighCVE-2019-17436palo alto networks · globalprotect agent for linux and osx +1 morepalo alto networks globalprotect agent for linux and osxA Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that can allow non-root users to overwrite root files on the file system.EPSS0.31%5.5MediumCVE-2026-0267palo alto networks · globalprotect app +1 moreGlobalProtect App: Information Exposure Vulnerability on macOSAn information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.EPSS0.10%8.1HighCVE-2026-0297palo alto networks · globalprotect app +1 moreGlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel HandshakeA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).EPSS0.31%8.1HighCVE-2026-0298palo alto networks · globalprotect app +1 moreGlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.EPSS0.33%7.8HighCVE-2026-0251palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation VulnerabilitiesMultiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.EPSS0.18%7HighCVE-2026-0295palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation via Race Condition on macOSA race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.EPSS0.07%7.8HighCVE-2026-0299palo alto networks · globalprotect app +1 moreGlobalProtect App: Local Privilege Escalation VulnerabilitiesLocal privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.EPSS0.20%8.1HighCVE-2026-0250palo alto networks · globalprotect app +2 moreGlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or GatewayA buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.EPSS0.39%6.5MediumCVE-2026-0249palo alto networks · globalprotect app +1 moreGlobalProtect App: Certificate Validation Bypass VulnerabilitiesMultiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.EPSS0.11%7.4HighCVE-2026-0296palo alto networks · globalprotect app +1 moreGlobalProtect App: Improper Certificate Validation Bypass VulnerabilityImproper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.EPSS0.14%