Login Request a demo
GA
Product
GlobalProtect App
by Palo Alto Networks · last CVE Oct 14, 2026
19
CVEs
0
On KEV
8.8
Max CVSS
2
New 30D
Vulnerabilities19In the news0Timeline
Severity mix
Critical 0High 10Medium 8Low 1
Severity
All severities19Critical0High10Medium8Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add GlobalProtect App to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-4232
8.8
0%
Jun 12
GlobalProtect: Authenticated Code Injection Through Wildcard on macOS
Affected: 6.3 before 6.3.3; 6.2.0 before 6.2.8-h2; 6.1.0; 6.0.0
CVE-2024-5921
8.8
1%
Nov 27
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation
Affected: 6.3.0 before 6.3.2; 6.2.0 before 6.2.6; 6.1.0; 6.3.0 before 6.3.2; 6.2.0 before 6.2.6-c857; 6.1.0; +5 more
CVE-2025-0141
8.4
0%
Jul 9
GlobalProtect App: Privilege Escalation (PE) Vulnerability
Affected: 6.3.0 before 6.3.3-h1 (6.3.3-c650); 6.2.0 before 6.2.8-h2 (6.2.8-c243); 6.1.0; 6.0.0; 6.2.0 before 6.2.8; 6.1.0; +1 more
CVE-2026-0298
8.1
1%
Aug 13
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)
Affected: 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15
CVE-2026-0297
8.1
1%
Aug 13
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake
Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15; +2 more
CVE-2026-0250
8.1
0%
May 13
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.1 before 6.1.13; 6.3.0 before 6.3.3-h2 (6.3.3-42); 6.0.0 before 6.0.11; 6.0 before 6.0.13; +1 more
CVE-2026-0299
7.8
0%
Aug 13
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15
CVE-2026-0251
7.8
0%
May 13
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Affected: 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; 6.3.0 before 6.3.3-h9 (6.3.3-999); 6.2.0 before 6.2.8-h10 (6.2.8-948); 6.0.0 before 6.0.13; +2 more
CVE-2026-0296
7.4
0%
Aug 13
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability
Affected: 6.3.0 before 6.3.3-h15; 6.2.0; 6.0.0 before 6.0.15; 6.3.0 before 6.3.3-h14; 6.2.0 before 6.2.8-h13; 6.0.0 before 6.0.15
CVE-2026-0295
7.0
0%
Aug 13
GlobalProtect App: Local Privilege Escalation via Race Condition on macOS
Affected: 6.3.0 before 6.3.3-h14 (6.3.3-1121); 6.2.0 before 6.2.8-h13 (6.2.8-1045); 6.0.0 before 6.0.15
Showing 10