GA
Product
GlobalProtect App
24
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 14Medium 9Low 1
Watch
Add GlobalProtect App to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4232 | 8.8 | Jun 12 | GlobalProtect: Authenticated Code Injection Through Wildcard on macOS Affected: 6.3 before 6.3.3; 6.2.0 before 6.2.8-h2; 6.1.0; 6.0.0 |
| CVE-2024-5921 | 8.8 | Nov 27 | GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation Affected: 6.3.0 before 6.3.2; 6.2.0 before 6.2.6; 6.1.0; 6.3.0 before 6.3.2; 6.2.0 before 6.2.6-c857; 6.1.0; +5 more |
| CVE-2025-0141 | 8.4 | Jul 9 | GlobalProtect App: Privilege Escalation (PE) Vulnerability Affected: 6.3.0 before 6.3.3-h1 (6.3.3-c650); 6.2.0 before 6.2.8-h2 (6.2.8-c243); 6.1.0; 6.0.0; 6.2.0 before 6.2.8; 6.1.0; +1 more |
| CVE-2026-0298 | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Affected: 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0297 | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15; +2 more |
| CVE-2026-0250 | 8.1 | May 13 | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1 before 6.1.13; 6.3.0 before 6.3.3-h2 (6.3.3-42); 6.0.0 before 6.0.11; 6.0 before 6.0.13; +1 more |
| CVE-2026-0299 | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0251 | 7.8 | May 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; +2 more |
| CVE-2024-5915 | 7.8 | Aug 14 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1; 6.0; 6.1 before 6.1.5; 6.2 before 6.2.4; 6.3 before 6.3.1 |
| CVE-2024-5908 | 7.5 | Jun 12 | GlobalProtect App: Encrypted Credential Exposure via Log Files Affected: 5.1.0 before 5.1.12; 6.0.0 before 6.0.8; 6.1.0 before 6.1.3; 6.2.0 before 6.2.3 |
| CVE-2026-0296 | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2024-8687 | 7.1 | Sep 11 | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes Affected: 5.1.0 before 5.1.12; 5.2.0 before 5.2.13; 6.0.0 before 6.0.7; 6.1.0 before 6.1.2; 6.2.0 before 6.2.1 |
| CVE-2026-0295 | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Affected: 6.3.0 before 6.3.3-h14 (6.3.3-1121); 6.2.0 before 6.2.8-h13 (6.2.8-1045); 6.0.0 before 6.0.15 |
| CVE-2024-2432 | 7.0 | Mar 13 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1 before 5.1.12; 6.0 before 6.0.8; 6.1 before 6.1.2; 6.2 before 6.2.1 |
| CVE-2025-2179 | 6.8 | Jul 29 | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Affected: 6.2.0 before 6.2.9; 6.1.0; 6.0.0 |
| CVE-2025-0140 | 6.8 | Jul 9 | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Affected: 6.3.0 before 6.3.3-h1 (6.3.3-c650); 6.2.0 before 6.2.8-h2 (6.2.8-c243); 6.1.0; 6.0.0 |
| CVE-2026-0249 | 6.5 | May 13 | GlobalProtect App: Certificate Validation Bypass Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1.0 before 6.1.13; 6.0.0 before 6.0.14; 6.0.0 before 6.0.13 |
| CVE-2026-0315 | 5.9 | Oct 14 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS Affected: 6.2.0 before 6.2.8-h15; 6.3.0 before 6.3.3-h16 |
| CVE-2026-0307 | 5.9 | Sep 10 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h15; 6.2.0 before 6.2.8-h14; 6.0.0 before 6.0.15 |
| CVE-2026-0267 | 5.5 | Jun 10 | GlobalProtect App: Information Exposure Vulnerability on macOS Affected: 6.3.0 before 6.3.3-h1; 6.2.0 before 6.2.8-h2 |
| CVE-2024-2431 | 5.5 | Mar 13 | GlobalProtect App: Local User Can Disable GlobalProtect Affected: 6.0 before 6.0.4; 5.1 before 5.1.12; 5.2 before 5.2.13; 6.1 before 6.1.1 |
| CVE-2025-2183 | 5.3 | Aug 13 | GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation Affected: 6.3.0 before 6.3.3-h2 (6.3.3-c676); 6.2.0 before 6.2.8-h3 (6.2.8-c263); 6.1.0; 6.0.0; 6.3.0 before 6.3.3; 6.2.0 before 11.1.10; +2 more |
| CVE-2026-0314 | 4.3 | Oct 14 | GlobalProtect App: Local Denial of Service (DoS) on Windows Affected: 6.3.0 before 6.3.3-h16; 6.2.0 before 6.2.8-h15; 6.0.0 before 6.0.15 |
| CVE-2025-4227 | 3.5 | Jun 13 | GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement Affected: 6.3.0 before 6.3.2-566; 6.2.0 before 6.2.8-h2; 6.1.0; 6.0.0 |
Showing 24