GA
Product
GlobalProtect App
13
CVEs
0
On KEV
8.1
Max CVSS
2
New 30D
Severity mix
Critical 0High 7Medium 6Low 0
Watch
Add GlobalProtect App to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-0298 | 8.1 | Aug 13 | GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) Affected: 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0297 | 8.1 | Aug 13 | GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15; +2 more |
| CVE-2026-0250 | 8.1 | May 13 | GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1 before 6.1.13; 6.3.0 before 6.3.3-h2 (6.3.3-42); 6.0.0 before 6.0.11; 6.0 before 6.0.13; +1 more |
| CVE-2026-0299 | 7.8 | Aug 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0251 | 7.8 | May 13 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; +2 more |
| CVE-2026-0296 | 7.4 | Aug 13 | GlobalProtect App: Improper Certificate Validation Bypass Vulnerability Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15 |
| CVE-2026-0295 | 7.0 | Aug 13 | GlobalProtect App: Local Privilege Escalation via Race Condition on macOS Affected: 6.3.0 before 6.3.3-h14 (6.3.3-1121); 6.2.0 before 6.2.8-h13 (6.2.8-1045); 6.0.0 before 6.0.15 |
| CVE-2026-0249 | 6.5 | May 13 | GlobalProtect App: Certificate Validation Bypass Vulnerabilities Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1.0 before 6.1.13; 6.0.0 before 6.0.14; 6.0.0 before 6.0.13 |
| CVE-2026-0315 | 5.9 | Oct 14 | GlobalProtect App: Local Privilege Escalation Vulnerability on macOS Affected: 6.2.0 before 6.2.8-h15; 6.3.0 before 6.3.3-h16 |
| CVE-2026-0307 | 5.9 | Sep 10 | GlobalProtect App: Local Privilege Escalation Vulnerabilities Affected: 6.3.0 before 6.3.3-h15; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h15; 6.2.0 before 6.2.8-h14; 6.0.0 before 6.0.15 |
| CVE-2026-0267 | 5.5 | Jun 10 | GlobalProtect App: Information Exposure Vulnerability on macOS Affected: 6.3.0 before 6.3.3-h1; 6.2.0 before 6.2.8-h2 |
| CVE-2025-2183 | 5.3 | Aug 13 | GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation Affected: 6.3.0 before 6.3.3-h2 (6.3.3-c676); 6.2.0 before 6.2.8-h3 (6.2.8-c263); 6.1.0; 6.0.0; 6.3.0 before 6.3.3; 6.2.0 before 11.1.10; +2 more |
| CVE-2026-0314 | 4.3 | Oct 14 | GlobalProtect App: Local Denial of Service (DoS) on Windows Affected: 6.3.0 before 6.3.3-h16; 6.2.0 before 6.2.8-h15; 6.0.0 before 6.0.15 |
Showing 13