Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks GlobalProtect App 6.0.11, 6.3.3-h2 (6.3.3-42) Clear all filters
TI-2026-00194 CVE-2026-0250 · GHSA-mv4m-c9mp-36jr

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Priority LOW 26

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges.

CVSS 4.0MEDIUM 5.2 Adjacent network No auth No interaction EPSS 0.00392 Published 2026-05-13 Fixed in 6.3.3-h9 (6.3.3-999), 6.2.8-h10 (6.2.8-948) +7 CWE-787
TI-2026-00195 CVE-2026-0251 · GHSA-h94g-f37w-qxpj

GlobalProtect App: Local Privilege Escalation Vulnerabilities

Priority LOW 28

Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux.

CVSS 4.0MEDIUM 5.9 Local Low privileges No interaction EPSS 0.00185 Published 2026-05-13 Fixed in 6.3.3-h9 (6.3.3-999), 6.2.8-h10 (6.2.8-948) +4 CWE-426