Palo Alto Networks GlobalProtect App
41 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-0314 | 6.3.0 – < 6.3.3-h16 ; 6.2.0 – < 6.2.8-h15 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Local Denial of Service (DoS) on Windows | MEDIUM 4.3 | 0.1 % | ||
| CVE-2026-0315 | 6.2.0 – < 6.2.8-h15 ; 6.3.0 – < 6.3.3-h16 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-0307 | 6.3.0 – < 6.3.3-h15 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Local Privilege Escalation Vulnerabilities | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-0299 | 6.3.0 – < 6.3.3-h15 ; 6.2.0 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Local Privilege Escalation Vulnerabilities | MEDIUM 5.9 | 0.2 % | ||
| CVE-2026-0298 | 6.3.0 – < 6.3.3-h14 ; 6.2.0 – < 6.2.8-h13 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) | MEDIUM 5.2 | 0.7 % | ||
| CVE-2026-0297 | 6.3.0 – < 6.3.3-h15 ; 6.2.0 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake | MEDIUM 5.2 | 0.6 % | ||
| CVE-2026-0296 | 6.3.0 – < 6.3.3-h15 ; 6.2.0 ; 6.0.0 – < 6.0.15 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability | MEDIUM 4.5 | 0.3 % | ||
| CVE-2026-0295 | 6.3.0 – < 6.3.3-h14 (6.3.3-1121) ; 6.2.0 – < 6.2.8-h13 (6.2.8-1045) ; 6.0.0 – < 6.0.15 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS | MEDIUM 4.1 | 0.1 % | ||
| CVE-2026-0267 | 6.3.0 – < 6.3.3-h1 ; 6.2.0 – < 6.2.8-h2 | GlobalProtect App: Information Exposure Vulnerability on macOS | MEDIUM 4.4 | 0.1 % | ||
| CVE-2026-0249 | 6.3.0 – < 6.3.3-h9 (6.3.3-999) ; 6.2.0 – < 6.2.8-h10 (6.2.8-948) | GlobalProtect App: Certificate Validation Bypass Vulnerabilities | MEDIUM 4.9 | 0.1 % | ||
| CVE-2026-0250 | 6.3.0 – < 6.3.3-h9 (6.3.3-999) ; 6.2.0 – < 6.2.8-h10 (6.2.8-948) | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway | MEDIUM 5.2 | 0.4 % | ||
| CVE-2026-0251 | 6.3.0 – < 6.3.3-h9 (6.3.3-999) ; 6.2.0 – < 6.2.8-h10 (6.2.8-948) ; 6.0.0 – < 6.0.13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities | MEDIUM 5.9 | 0.2 % | ||
| CVE-2025-2183 | 6.3.0 – < 6.3.3-h2 (6.3.3-c676) ; 6.2.0 – < 6.2.8-h3 (6.2.8-c263) ; 6.1.0 ; … | GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation | MEDIUM 5.3 | 0.1 % | ||
| CVE-2025-2179 | 6.2.0 – < 6.2.9 ; 6.1.0 ; 6.0.0 | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-0141 | 6.3.0 – < 6.3.3-h1 (6.3.3-c650) ; 6.2.0 – < 6.2.8-h2 (6.2.8-c243) ; 6.1.0 ; … | GlobalProtect App: Privilege Escalation (PE) Vulnerability | HIGH 8.4 | 0.2 % | ||
| CVE-2025-0140 | 6.3.0 – < 6.3.3-h1 (6.3.3-c650) ; 6.2.0 – < 6.2.8-h2 (6.2.8-c243) ; 6.1.0 ; … | GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | MEDIUM 6.8 | 0.1 % | ||
| CVE-2025-4227 | 6.3.0 – < 6.3.2-566 ; 6.2.0 – < 6.2.8-h2 ; 6.1.0 ; … | GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement | LOW 1.0 | 0.2 % | ||
| CVE-2025-4232 | 6.3 – < 6.3.3 ; 6.2.0 – < 6.2.8-h2 ; 6.1.0 ; … | GlobalProtect: Authenticated Code Injection Through Wildcard on macOS | HIGH 8.5 | 0.5 % | ||
| CVE-2025-0135 | 6.3.0 – < 6.3.3 ; 6.2.0 – < 6.2.8 ; 6.1.0 ; … | GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | MEDIUM 5.2 | 0.1 % | ||
| CVE-2025-0120 | 6.3.0 – < 6.3.3 ; 6.2.0 – < 6.2.8 ; 6.1.0 ; … | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2025-0118 | 6.2.0 – < 6.2.5 ; 6.1.0 – < 6.1.6 ; 6.0.0 – < 6.0.11 | GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability | MEDIUM 6.0 | 0.5 % | ||
| CVE-2025-0117 | 6.3.0 – < 6.3.3 ; 6.2.0 – < 6.2.6 ; 6.1.0 – < 10.2.14 ; … | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | HIGH 7.1 | 0.2 % | ||
| CVE-2024-5921 | 6.3.0 – < 6.3.2 ; 6.2.0 – < 6.2.6 ; 6.1.0 | GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation | HIGH 7.1 | 1.5 % | ||
| CVE-2024-9473 | 5.1 ; 6.0 ; 6.1 ; … | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | MEDIUM 5.2 | 0.3 % | ||
| CVE-2024-8687 | 5.1.0 – < 5.1.12 ; 5.2.0 – < 5.2.13 ; 6.0.0 – < 6.0.7 ; … | PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | MEDIUM 6.9 | 0.4 % | ||
| CVE-2024-5915 | 5.1 ; 6.0 ; 6.1 – < 6.1.5 ; … | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | MEDIUM 5.2 | 0.2 % | ||
| CVE-2024-5908 | 5.1.0 – < 5.1.12 ; 6.0.0 – < 6.0.8 ; 6.1.0 – < 6.1.3 ; … | GlobalProtect App: Encrypted Credential Exposure via Log Files | MEDIUM 5.5 | 0.4 % | ||
| CVE-2024-2432 | 5.1 – < 5.1.12 ; 6.0 – < 6.0.8 ; 6.1 – < 6.1.2 ; … | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | HIGH 7.0 | 0.4 % | ||
| CVE-2024-2431 | 6.0 – < 6.0.4 ; 5.1 – < 5.1.12 ; 5.2 – < 5.2.13 ; … | GlobalProtect App: Local User Can Disable GlobalProtect | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-0009 | 6.1 – < 6.1.1 ; 6.0 – < 6.0.5 ; 5.2 – < 5.2.13 | GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | HIGH 7.8 | 0.2 % | ||
| CVE-2023-0006 | 6.0 – < 6.0.4 ; 6.1 – < 6.1.1 ; 5.2 – < 5.2.13 | GlobalProtect App: Local File Deletion Vulnerability | MEDIUM 6.3 | 0.1 % | ||
| CVE-2022-0021 | 5.2 – < 5.2.9 | GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-0019 | 5.3 – < 5.3.2 ; 5.2 – 5.2.7 ; 5.1 – < 5.1.10 | GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux | MEDIUM 5.5 | 0.2 % | ||
| CVE-2022-0018 | 5.2 – < 5.2.9 ; 5.1 – < 5.1.10 | GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled | MEDIUM 6.5 | 0.7 % | ||
| CVE-2022-0017 | 5.2 – < 5.2.5 ; 5.1 – < 5.1.10 | GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation | HIGH 7.8 | 0.3 % | ||
| CVE-2022-0016 | 5.2 – < 5.2.9 | GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon | HIGH 7.8 | 0.2 % | ||
| CVE-2021-3057 | 5.1 – < 5.1.9 ; 5.2 – < 5.2.8 | GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway | HIGH 8.1 | 1.4 % | ||
| CVE-2021-3038 | 5.1 – < 5.1.8 ; 5.2 – < 5.2.4 | GlobalProtect App: Windows VPN kernel driver denial of service (DoS) | MEDIUM 5.5 | 0.2 % | ||
| CVE-2020-2033 | 5.1 – < 5.1.4 ; 5.0 – < 5.0.10 | GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie | MEDIUM 5.3 | 0.9 % | ||
| CVE-2020-2032 | 5.1 – < 5.1.4 ; 5.0 – < 5.0.10 | GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade | HIGH 7.0 | 0.2 % | ||
| CVE-2020-2004 | 5.0 – < 5.0.9 ; 5.1 – < 5.1.2 | GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs | MEDIUM 6.8 | 0.3 % |