GA
Product
GlobalProtect app
36
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 19Medium 16Low 1
Watch
Add GlobalProtect app to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-4232 | 8.8 | Jun 12 | GlobalProtect: Authenticated Code Injection Through Wildcard on macOS Affected: 6.3 before 6.3.3; 6.2.0 before 6.2.8-h2; 6.1.0; 6.0.0 |
| CVE-2024-5921 | 8.8 | Nov 27 | GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation Affected: 6.3.0 before 6.3.2; 6.2.0 before 6.2.6; 6.1.0; 6.3.0 before 6.3.2; 6.2.0 before 6.2.6-c857; 6.1.0; +5 more |
| CVE-2025-0141 | 8.4 | Jul 9 | GlobalProtect App: Privilege Escalation (PE) Vulnerability Affected: 6.3.0 before 6.3.3-h1 (6.3.3-c650); 6.2.0 before 6.2.8-h2 (6.2.8-c243); 6.1.0; 6.0.0; 6.2.0 before 6.2.8; 6.1.0; +1 more |
| CVE-2026-0298 | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Affected: 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0297 | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15; +2 more |
| CVE-2026-0250 | 8.1 | May 13 | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1 before 6.1.13; 6.3.0 before 6.3.3-h2 (6.3.3-42); 6.0.0 before 6.0.11; 6.0 before 6.0.13; +1 more |
| CVE-2021-3057 | 8.1 | Oct 13 | GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway Affected: 5.1 before 5.1.9; 5.2 before 5.2.8; 5.3 before 5.3.1; 5.2 before 5.2.8 |
| CVE-2026-0299 | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0251 | 7.8 | May 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; +2 more |
| CVE-2024-5915 | 7.8 | Aug 14 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1; 6.0; 6.1 before 6.1.5; 6.2 before 6.2.4; 6.3 before 6.3.1 |
| CVE-2023-0009 | 7.8 | Jun 14 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 6.1 before 6.1.1; 6.0 before 6.0.5; 5.2 before 5.2.13 |
| CVE-2022-0017 | 7.8 | Feb 10 | GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation Affected: 5.2 before 5.2.5; 5.1 before 5.1.10 |
| CVE-2022-0016 | 7.8 | Feb 10 | GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon Affected: 5.2 before 5.2.9 |
| CVE-2024-5908 | 7.5 | Jun 12 | GlobalProtect App: Encrypted Credential Exposure via Log Files Affected: 5.1.0 before 5.1.12; 6.0.0 before 6.0.8; 6.1.0 before 6.1.3; 6.2.0 before 6.2.3 |
| CVE-2026-0296 | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2024-8687 | 7.1 | Sep 11 | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes Affected: 5.1.0 before 5.1.12; 5.2.0 before 5.2.13; 6.0.0 before 6.0.7; 6.1.0 before 6.1.2; 6.2.0 before 6.2.1 |
| CVE-2026-0295 | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Affected: 6.3.0 before 6.3.3-h14 (6.3.3-1121); 6.2.0 before 6.2.8-h13 (6.2.8-1045); 6.0.0 before 6.0.15 |
| CVE-2024-2432 | 7.0 | Mar 13 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability Affected: 5.1 before 5.1.12; 6.0 before 6.0.8; 6.1 before 6.1.2; 6.2 before 6.2.1 |
| CVE-2020-2032 | 7.0 | Jun 10 | GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade Affected: 5.1 before 5.1.4; 5.0 before 5.0.10 |
Showing 19