Veille CVE

Recherche « Palo Alto Networks Global Protect App »

15 CVE

Critique 1 Élevée 8 Moyenne 6 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Palo Alto Networks Global Protect App » ✕
  1. CVE-2026-0315 5.9 Moyenne

    Palo Alto Networks GlobalProtect App

    A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability.

  2. CVE-2026-0314 4.3 Moyenne

    Palo Alto Networks GlobalProtect App

    A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

  3. CVE-2026-0307 5.9 Moyenne

    Palo Alto Networks GlobalProtect App

    Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. This GlobalProtect app on iOS, Android and ChromeOS is not impacted.

  4. CVE-2026-0299 7.8 Élevée

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

  5. CVE-2026-0298 8.1 Élevée

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitrary code with SYSTEM privileges on an affected client. The GlobalProtect app on Linux, macOS, iOS, Android, and Chrome OS is not affected.

  6. CVE-2026-0297 8.1 Élevée

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

  7. CVE-2026-0296 7.4 Élevée

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications. VPN tunnel traffic is not impacted. The GlobalProtect app on iOS, Android, and Chrome OS is not affected.

  8. CVE-2026-0295 7.0 Élevée

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

  9. CVE-2026-0279 6.1 Moyenne

    Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Access · Siemens RUGGEDCOM APE1808

    Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthenticated user to store or execute malicious JavaScript payload. The security risk posed by this issue is minimized when the management interface and access to the User-ID™ Authentication Portal is restricted to only trusted internal IP addresses according to our recommended best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue is applicable to PAN-OS software on PA-Series and VM-Series firewalls and on Panorama (virtual and M-Series). Cloud NGFW is not affected by this vulnerability.

  10. CVE-2026-0267 5.5 Moyenne

    Palo Alto Networks GlobalProtect App · Palo Alto Networks GlobalProtect UWP App · Paloaltonetworks globalprotect

    An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

  11. CVE-2026-0251 7.8 Élevée

    Palo Alto Networks GlobalProtect App · Palo Alto Networks Global Protect App · Paloaltonetworks globalprotect

    Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on iOS, Android, Chrome OS and GlobalProtect UWP app are not affected.

  12. CVE-2026-0250 8.1 Élevée

    Palo Alto Networks GlobalProtect App · Palo Alto Networks GlobalProtect UWP App · Paloaltonetworks globalprotect

    A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

  13. CVE-2026-0249 6.5 Moyenne

    Palo Alto Networks GlobalProtect App · Paloaltonetworks globalprotect

    Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating system user or an attacker on the same subnet to redirect traffic to an unauthorized server and facilitate the installation of malicious software. The GlobalProtect app on Linux, Windows, iOS and GlobalProtect UWP app are not affected.

  14. CVE-2024-3400 10.0 Critique Exploitée Rançongiciel

    Palo Alto Networks PAN-OS · Palo Alto Networks Cloud NGFW · Palo Alto Networks Prisma Access · paloaltonetworks pan-os

    A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.

  15. CVE-2018-14634 7.8 Élevée Exploitée

    The Linux Foundation kernel · Paloaltonetworks pan-os · F5 big-ip access policy manager · F5 big-ip advanced firewall manager

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.