Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks GlobalProtect App 6.3.3 Clear all filters
TI-2025-00083 CVE-2025-0118 · GHSA-4gx3-p432-m8m7

GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability

Priority LOW 29

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00456 Published 2025-03-12 Fixed in 6.3.0, 6.2.5 +3 CWE-618
TI-2025-00082 CVE-2025-0117 · GHSA-vhjm-w3vw-g6jw

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

Priority LOW 32

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\S…

CVSS 4.0HIGH 7.1 Local Low privileges User interaction EPSS 0.00164 Published 2025-03-12 Fixed in 6.3.3, 6.2.6 +3 CWE-807