GlobalProtect App
- Software type
- VPN
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/08/2026, GlobalProtect App recorded 8 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of GlobalProtect App and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOSCVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on WindowsCVE-2026-0307GlobalProtect App: Local Privilege Escalation VulnerabilitiesCVE-2026-0299GlobalProtect App: Local Privilege Escalation VulnerabilitiesCVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP)| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-0315GlobalProtect App: Local Privilege Escalation Vulnerability on macOS | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2026-0314GlobalProtect App: Local Denial of Service (DoS) on Windows | Exploitation statusNot exploited | FixYes | Published10/14/2026 | SeverityMedium |
|---|
CVE-2026-0307GlobalProtect App: Local Privilege Escalation Vulnerabilities | Exploitation statusNot exploited | FixYes | Published09/10/2026 | SeverityMedium |
|---|
CVE-2026-0299GlobalProtect App: Local Privilege Escalation Vulnerabilities | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-0298GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-0297GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-0296GlobalProtect App: Improper Certificate Validation Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-0295GlobalProtect App: Local Privilege Escalation via Race Condition on macOS | Exploitation statusNot exploited | FixYes | Published08/13/2026 | SeverityMedium |
|---|
CVE-2026-0267GlobalProtect App: Information Exposure Vulnerability on macOS | Exploitation statusNot exploited | FixYes | Published06/10/2026 | SeverityMedium |
|---|
CVE-2026-0251GlobalProtect App: Local Privilege Escalation Vulnerabilities | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityMedium |
|---|
CVE-2026-0250GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityMedium |
|---|
CVE-2026-0249GlobalProtect App: Certificate Validation Bypass Vulnerabilities | Exploitation statusNot exploited | FixYes | Published05/13/2026 | SeverityMedium |
|---|
CVE-2025-2183GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation | Exploitation statusNot exploited | FixYes | Published08/13/2025 | SeverityMedium |
|---|
CVE-2025-2179GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | Exploitation statusNot exploited | FixYes | Published07/29/2025 | SeverityMedium |
|---|
CVE-2025-0141GlobalProtect App: Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published07/09/2025 | SeverityHigh |
|---|
CVE-2025-0140GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | Exploitation statusNot exploited | FixYes | Published07/09/2025 | SeverityMedium |
|---|
CVE-2025-4227GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement | Exploitation statusNot exploited | FixYes | Published06/13/2025 | SeverityLow |
|---|
CVE-2025-4232GlobalProtect: Authenticated Code Injection Through Wildcard on macOS | Exploitation statusNot exploited | FixYes | Published06/12/2025 | SeverityHigh |
|---|
CVE-2025-0135GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | Exploitation statusNot exploited | FixYes | Published05/14/2025 | SeverityMedium |
|---|
CVE-2025-0120GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published04/11/2025 | SeverityHigh |
|---|
CVE-2025-0118GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability | Exploitation statusNot exploited | FixYes | Published03/12/2025 | SeverityMedium |
|---|
CVE-2025-0117GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published03/12/2025 | SeverityHigh |
|---|
CVE-2024-5921GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation | Exploitation statusActively exploited | FixYes | Published11/27/2024 | SeverityHigh |
|---|
CVE-2024-9473GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusActively exploited | FixYes | Published10/09/2024 | SeverityMedium |
|---|
CVE-2024-8687PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | Exploitation statusNot exploited | FixYes | Published09/11/2024 | SeverityMedium |
|---|
CVE-2024-5915GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published08/14/2024 | SeverityMedium |
|---|
CVE-2024-5908GlobalProtect App: Encrypted Credential Exposure via Log Files | Exploitation statusNot exploited | FixYes | Published06/12/2024 | SeverityMedium |
|---|
CVE-2024-2432GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published03/13/2024 | SeverityMedium |
|---|
CVE-2024-2431GlobalProtect App: Local User Can Disable GlobalProtect | Exploitation statusNot exploited | FixYes | Published03/13/2024 | SeverityMedium |
|---|
CVE-2023-0009GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | Exploitation statusNot exploited | FixYes | Published06/14/2023 | SeverityHigh |
|---|
CVE-2023-0006GlobalProtect App: Local File Deletion Vulnerability | Exploitation statusNot exploited | FixYes | Published04/12/2023 | SeverityMedium |
|---|
CVE-2022-0021GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon | Exploitation statusNot confirmed | FixYes | Published02/10/2022 | SeverityLow |
|---|
CVE-2022-0019GlobalProtect App: Insufficiently Protected Credentials Vulnerability on Linux | Exploitation statusNot confirmed | FixYes | Published02/10/2022 | SeverityMedium |
|---|
CVE-2022-0018GlobalProtect App: Information Exposure Vulnerability When Connecting to GlobalProtect Portal With Single Sign-On Enabled | Exploitation statusNot confirmed | FixYes | Published02/10/2022 | SeverityMedium |
|---|
CVE-2022-0017GlobalProtect App: Improper Link Resolution Vulnerability Leads to Local Privilege Escalation | Exploitation statusNot confirmed | FixYes | Published02/10/2022 | SeverityHigh |
|---|
CVE-2022-0016GlobalProtect App: Privilege Escalation Vulnerability When Using Connect Before Logon | Exploitation statusNot confirmed | FixYes | Published02/10/2022 | SeverityHigh |
|---|
CVE-2021-3057GlobalProtect App: Buffer Overflow Vulnerability When Connecting to Portal or Gateway | Exploitation statusNot confirmed | FixYes | Published10/13/2021 | SeverityHigh |
|---|
CVE-2021-3038GlobalProtect App: Windows VPN kernel driver denial of service (DoS) | Exploitation statusNot confirmed | FixYes | Published04/20/2021 | SeverityMedium |
|---|
CVE-2020-2033GlobalProtect App: Missing certificate validation vulnerability can disclose pre-logon authentication cookie | Exploitation statusNot confirmed | FixYes | Published06/10/2020 | SeverityMedium |
|---|
CVE-2020-2032GlobalProtect App: File race condition vulnerability leads to local privilege escalation during upgrade | Exploitation statusNot confirmed | FixYes | Published06/10/2020 | SeverityHigh |
|---|
CVE-2020-2004GlobalProtect App: Passwords may be logged in clear text while collecting troubleshooting logs | Exploitation statusNot confirmed | FixYes | Published05/13/2020 | SeverityMedium |
|---|
41 Results | Page 1 of 1