GA
Product
GlobalProtect app
36
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Severity mix
Critical 0High 19Medium 16Low 1
Watch
Add GlobalProtect app to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2179 | 6.8 | Jul 29 | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Affected: 6.2.0 before 6.2.9; 6.1.0; 6.0.0 |
| CVE-2025-0140 | 6.8 | Jul 9 | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App Affected: 6.3.0 before 6.3.3-h1 (6.3.3-c650); 6.2.0 before 6.2.8-h2 (6.2.8-c243); 6.1.0; 6.0.0 |
| CVE-2026-0249 | 6.5 | May 13 | GlobalProtect App: Certificate Validation Bypass Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1.0 before 6.1.13; 6.0.0 before 6.0.14; 6.0.0 before 6.0.13 |
| CVE-2022-0018 | 6.5 | Feb 10 | GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled Affected: 5.2 before 5.2.9; 5.1 before 5.1.10 |
| CVE-2023-0006 | 6.3 | Apr 12 | GlobalProtect App: Local File Deletion Vulnerability Affected: 6.0 before 6.0.4; 6.1 before 6.1.1; 5.2 before 5.2.13 |
| CVE-2026-0315 | 5.9 | Oct 14 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS Affected: 6.2.0 before 6.2.8-h15; 6.3.0 before 6.3.3-h16 |
| CVE-2026-0307 | 5.9 | Sep 10 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h15; 6.2.0 before 6.2.8-h14; 6.0.0 before 6.0.15 |
| CVE-2026-0267 | 5.5 | Jun 10 | GlobalProtect App: Information Exposure Vulnerability on macOS Affected: 6.3.0 before 6.3.3-h1; 6.2.0 before 6.2.8-h2 |
| CVE-2024-2431 | 5.5 | Mar 13 | GlobalProtect App: Local User Can Disable GlobalProtect Affected: 6.0 before 6.0.4; 5.1 before 5.1.12; 5.2 before 5.2.13; 6.1 before 6.1.1 |
| CVE-2022-0021 | 5.5 | Feb 10 | GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon Affected: 5.2 before 5.2.9 |
| CVE-2022-0019 | 5.5 | Feb 10 | GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux Affected: 5.3 before 5.3.2; 5.2 through 5.2.7; 5.1 before 5.1.10 |
| CVE-2021-3038 | 5.5 | Apr 20 | GlobalProtect App: Windows VPN kernel driver denial of service (DoS) Affected: 5.1 before 5.1.8; 5.2 before 5.2.4 |
| CVE-2020-2004 | 5.5 | May 13 | GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs Affected: 5.0 before 5.0.9; 5.1 before 5.1.2 |
| CVE-2025-2183 | 5.3 | Aug 13 | GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation Affected: 6.3.0 before 6.3.3-h2 (6.3.3-c676); 6.2.0 before 6.2.8-h3 (6.2.8-c263); 6.1.0; 6.0.0; 6.3.0 before 6.3.3; 6.2.0 before 11.1.10; +2 more |
| CVE-2020-2033 | 5.3 | Jun 10 | GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie Affected: 5.1 before 5.1.4; 5.0 before 5.0.10 |
| CVE-2026-0314 | 4.3 | Oct 14 | GlobalProtect App: Local Denial of Service (DoS) on Windows Affected: 6.3.0 before 6.3.3-h16; 6.2.0 before 6.2.8-h15; 6.0.0 before 6.0.15 |
Showing 16