Globalprotect (Paloaltonetworks) - vulnerabilities (CVEs)

43 CVEs, 0 in the last 30 days, 359 known versions, newest CVE from 2026-08-13. Vendor: Paloaltonetworks.

CVEs of Globalprotect

CVE-2026-0299 - CVSS 7.8 (high), 2026-08-13: Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT…
CVE-2026-0298 - CVSS 8.1 (high), 2026-08-13: An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on…
CVE-2026-0297 - CVSS 8.1 (high), 2026-08-13: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to…
CVE-2026-0296 - CVSS 7.4 (high), 2026-08-13: Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM)…
CVE-2026-0295 - CVSS 7 (high), 2026-08-13: A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges…
CVE-2026-0267 - CVSS 5.5 (medium), 2026-06-10: An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for…
CVE-2026-0249 - CVSS 6.5 (medium), 2026-05-13: Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted…
CVE-2026-0251 - CVSS 7.8 (high), 2026-05-13: Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT…
CVE-2026-0250 - CVSS 8.1 (high), 2026-05-13: A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and…
CVE-2025-4227 - CVSS 3.5 (low), 2025-06-13: An improper access control vulnerability in the Endpoint Traffic Policy Enforcement…
CVE-2025-4232 - CVSS 8.8 (high), 2025-06-13: An improper neutralization of wildcards vulnerability in the log collection feature of Palo Alto Networks GlobalProtect™ app on macOS allows a non…
CVE-2025-0135 - CVSS 5.2 (medium), 2025-05-14: An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non…
CVE-2025-0120 - CVSS 7.1 (high), 2025-04-11: A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated…
CVE-2025-0118 - CVSS 8 (high), 2025-03-12: A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated…
CVE-2024-5921 - CVSS 8.8 (high), 2024-11-27: An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to connect the GlobalProtect app to arbitrary…
CVE-2024-9473 - CVSS 7.8 (high), 2024-10-09: A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to…
CVE-2024-8687 - CVSS 7.1 (high), 2024-09-11: An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured…
CVE-2024-5915 - CVSS 7.8 (high), 2024-08-14: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with…
CVE-2024-5908 - CVSS 7.5 (high), 2024-06-12: A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in…
CVE-2024-3661 - CVSS 7.6 (high), 2024-05-06: DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect…
CVE-2024-2431 - CVSS 5.5 (medium), 2024-03-13: An issue in the Palo Alto Networks GlobalProtect app enables a non-privileged user to disable the GlobalProtect app in configurations that allow a user to…
CVE-2024-2432 - CVSS 7 (high), 2024-03-13: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with…
CVE-2023-0009 - CVSS 7.8 (high), 2023-06-14: A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated…
CVE-2023-0006 - CVSS 6.3 (medium), 2023-04-12: A local file deletion vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a user to delete system files from the endpoint…
CVE-2022-0021 - CVSS 5.5 (medium), 2022-02-10: An information exposure through log file vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that logs the cleartext credentials of…
CVE-2022-0016 - CVSS 7.8 (high), 2022-02-10: An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that…
CVE-2022-0019 - CVSS 5.5 (medium), 2022-02-10: An insufficiently protected credentials vulnerability exists in the Palo Alto Networks GlobalProtect app on Linux that exposes the hashed credentials of…
CVE-2022-0018 - CVSS 6.5 (medium), 2022-02-10: An information exposure vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows and MacOS where the credentials of the local user account…
CVE-2022-0017 - CVSS 7.8 (high), 2022-02-10: An improper link resolution before file access ('link following') vulnerability exists in the Palo Alto Networks GlobalProtect app on Windows that enables a…
CVE-2021-3057 - CVSS 8.1 (high), 2021-10-13: A stack-based buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect app that enables a man-in-the-middle attacker to disrupt system…
CVE-2021-3038 - CVSS 5.5 (medium), 2021-04-20: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted…
CVE-2020-2033 - CVSS 5.3 (medium), 2020-06-10: When the pre-logon feature is enabled, a missing certification validation in Palo Alto Networks GlobalProtect app can disclose the pre-logon authentication…
CVE-2020-2032 - CVSS 7 (high), 2020-06-10: A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges.…
CVE-2020-2004 - CVSS 6.8 (medium), 2020-05-13: Under certain circumstances a user's password may be logged in cleartext in the PanGPS.log diagnostic file when logs are collected for troubleshooting on…
CVE-2020-1989 - CVSS 7.8 (high), 2020-04-08: An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM…
CVE-2020-1988 - CVSS 6.7 (medium), 2020-04-08: An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the…
CVE-2020-1987 - CVSS 3.9 (low), 2020-04-08: An information exposure vulnerability in the logging component of Palo Alto Networks Global Protect Agent allows a local authenticated user to read VPN cookie…
CVE-2020-1976 - CVSS 5.5 (medium), 2020-02-12: A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect software running on Mac OS allows authenticated local users to cause the Mac OS…
CVE-2019-17436 - CVSS 7.1 (high), 2019-10-16: A Local Privilege Escalation vulnerability exists in GlobalProtect Agent for Linux and Mac OS X version 5.0.4 and earlier and version 4.1.12 and earlier, that…
CVE-2019-17435 - CVSS 5.5 (medium), 2019-10-16: A Local Privilege Escalation vulnerability exists in the GlobalProtect Agent for Windows 5.0.3 and earlier, and GlobalProtect Agent for Windows 4.1.12 and…
CVE-2019-1573 - CVSS 2.5 (low), 2019-04-09: GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the…
CVE-2017-15870 - CVSS 6.7 (medium), 2017-12-11: Palo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights on the local station to gain SYSTEM privileges via vectors…
CVE-2012-6606 - CVSS 5.8 (medium), 2013-08-31: Palo Alto Networks GlobalProtect before 1.1.7, and NetConnect, does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers…