| 9.2 | CVE-2026-109618
Impact of Critical Vulnerabilities in PHP (CVE-2026-109618, CVE-2026-109619) on Palo Alto Networks Products | Bridgecrew Cloud NGFW Cortex Cloud Cortex XCORE (SaaS) Cortex XDR Agent Cortex XDR Broker VM Cortex XSIAM Cortex XSOAR Cortex Xpanse GlobalProtect App Idira Koi Next Generation Trust Security PAN-OS 12.2 PAN-OS 12.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 10.2 Prisma Access Agent Prisma AIRS AI Gateway Prisma Cloud Prisma Access Prisma SD-WAN Controller Prisma SD-WAN ION Prisma SD-WAN On-Prem Controller Strata Cloud Manager Trust Protection Foundation WildFire Appliance WF-500 and WF-500-B WildFire Cloud | None None None None * None None None None None None None None None < 12.2.4-h1 < 12.1.4-h13, < 12.1.7-h11, < 12.1.10-h3 < 11.2.4-h23, < 11.2.7-h23, < 11.2.10-h16, < 11.2.13-h4, < 11.2.16-h1 < 11.1.4-h38, < 11.1.6-h40, < 11.1.7-h12, < 11.1.10-h36, < 11.1.13-h16, < 11.1.16-h4 < 10.2.7-h39, < 10.2.10-h42, < 10.2.13-h27, < 10.2.16-h12, < 10.2.18-h13 None None None None None None None None None None None ** | All All All All * All All All All All All All All All >= 12.2.4-h1 >= 12.1.4-h13, >= 12.1.7-h11, >= 12.1.10-h3 >= 11.2.4-h23, >= 11.2.7-h23, >= 11.2.10-h16, >= 11.2.13-h4, >= 11.2.16-h1 >= 11.1.4-h38, >= 11.1.6-h40, >= 11.1.7-h12, >= 11.1.10-h36, >= 11.1.13-h16, >= 11.1.16-h4 >= 10.2.7-h39, >= 10.2.10-h42, >= 10.2.13-h27, >= 10.2.16-h12, >= 10.2.18-h13 All All All All All All All All All All All ** | 2026-10-21 | 2026-10-29 |
| 5.9 | CVE-2026-0315
GlobalProtect App: Local Privilege Escalation Vulnerability on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 | None on Linux, None on Windows, None on iOS, None on Android, None on ChromeOS < 6.3.3-h16 (6.3.3-1199) on macOS < 6.2.8-h15 (6.2.8-1084) on macOS | All on Linux, All on Windows, All on iOS, All on Android, All on ChromeOS >= 6.3.3-h16 (6.3.3-1199) on macOS >= 6.2.8-h15 (6.2.8-1084) on macOS | 2026-10-14 | 2026-10-14 |
| 4.3 | CVE-2026-0314
GlobalProtect App: Local Denial of Service (DoS) on Windows | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on macOS, None on iOS, None on Android, None on Chrome OS < 6.3.3-h16 (6.3.3-1199) on Windows < 6.2.8-h15 (6.2.8-1084) on Windows < 6.0.15 on Windows | All on Linux, All on macOS, All on iOS, All on Android, All on Chrome OS >= 6.3.3-h16 (6.3.3-1199) on Windows >= 6.2.8-h15 (6.2.8-1084) on Windows >= 6.0.15 on Windows | 2026-10-14 | 2026-10-14 |
| 5.9 | CVE-2026-0307
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on ChromeOS < 6.3.3-h15 (6.3.3-c63) on Linux, < 6.3.3-h16 (6.3.3-1199) on macOS, < 6.3.3-h16 (6.3.3-1199) on Windows < 6.2.8-h15 (6.2.8-1084) on macOS, < 6.2.8-h15 (6.2.8-1084) on Windows < 6.0.15 on Linux (ETA: 10/29), < 6.0.15 on macOS (ETA: 10/29), < 6.0.15 on Windows (ETA: 10/29) | All on iOS, All on Android, All on ChromeOS >= 6.3.3-h15 (6.3.3-c63) on Linux, >= 6.3.3-h16 (6.3.3-1199) on macOS, >= 6.3.3-h16 (6.3.3-1199) on Windows >= 6.2.8-h15 (6.2.8-1084) on macOS, >= 6.2.8-h15 (6.2.8-1084) on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29) | 2026-09-09 | 2026-10-17 |
| 5.9 | CVE-2026-0299
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on Chrome OS < 6.3.3-h15 on Linux, < 6.3.3-h14 (6.3.3-1121) on macOS, < 6.3.3-h14 (6.3.3-1121) on Windows All on Linux, < 6.2.8-h13 (6.2.8-1045) on macOS, < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows | All on iOS, All on Android, All on Chrome OS >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 5.2 | CVE-2026-0298
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on macOS, None on Android, None on Chrome OS, None on iOS < 6.3.3-h14 (6.3.3-1121) on Windows < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Windows | All on Linux, All on macOS, All on Android, All on Chrome OS, All on iOS >= 6.3.3-h14 (6.3.3-1121) on Windows >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 5.2 | CVE-2026-0297
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake | GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | < 6.3.3-h15 on Linux, < 6.3.3-h14 on macOS, < 6.3.3-h14 on Windows, < 6.3.5 on iOS, < 6.3.5 on Android, < 6.3.5 on Chrome OS All on Linux, < 6.2.8-h13 on macOS, < 6.2.8-h13 on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows, < 6.0.15 on iOS, < 6.0.15 on Android, < 6.0.15 on Chrome OS | >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 on macOS, >= 6.3.3-h14 on Windows, >= 6.3.5 on iOS, >= 6.3.5 on Android, >= 6.3.5 on Chrome OS None on Linux, >= 6.2.8-h13 on macOS, >= 6.2.8-h13 on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29), >= 6.0.15 on iOS (ETA: 10/29), >= 6.0.15 on Android (ETA: 10/29), >= 6.0.15 on Chrome OS (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.5 | CVE-2026-0296
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on Chrome OS < 6.3.3-h15 on Linux, < 6.3.3-h14 (6.3.3-1121) on macOS, < 6.3.3-h14 (6.3.3-1121) on Windows All on Linux, < 6.2.8-h13 (6.2.8-1045) on macOS, < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows | All on iOS, All on Android, All on Chrome OS >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.1 | CVE-2026-0295
GlobalProtect App: Local Privilege Escalation via Race Condition on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on Windows, None on iOS, None on Android, None on Chrome OS < 6.3.3-h14 (6.3.3-1121) on macOS < 6.2.8-h13 (6.2.8-1045) on macOS < 6.0.15 on macOS | All on Linux, All on Windows, All on iOS, All on Android, All on Chrome OS >= 6.3.3-h14 (6.3.3-1121) on macOS >= 6.2.8-h13 (6.2.8-1045) on macOS >= 6.0.15 on macOS (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.4 | CVE-2026-0267
GlobalProtect App: Information Exposure Vulnerability on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect UWP App | None on Windows, Linux, iOS, Android, Chrome OS < 6.3.3-h1 on macOS < 6.2.8-h2 on macOS None | All on Windows, Linux, iOS, Android, Chrome OS >= 6.3.3-h1 on macOS >= 6.2.8-h2 on macOS All | 2026-06-10 | 2026-06-10 |
| 7.1 | CVE-2026-0251
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Android, None on ChromeOS, None on iOS, None on UWP < 6.3.3-h11 (6.3.3-c1016) on Windows, < 6.3.3-h11 (6.3.3-c1016) on macOS, < 6.3.3-h2 (6.3.3-c42) on Linux < 6.2.8-h10 (6.2.8-948) on Windows, < 6.2.8-h10 (6.2.8-948) on macOS < 6.0.13 on Windows, < 6.0.13 on macOS, < 6.0.11 on Linux | All on Android, All on ChromeOS, All on iOS, All on UWP >= 6.3.3-h11 (6.3.3-c1016) on Windows, >= 6.3.3-h11 (6.3.3-c1016) on macOS, >= 6.3.3-h2 (6.3.3-c42) on Linux >= 6.2.8-h10 (6.2.8-948) on Windows, >= 6.2.8-h10 (6.2.8-948) on macOS >= 6.0.13 on Windows, >= 6.0.13 on macOS, >= 6.0.11 on Linux | 2026-05-13 | 2026-08-27 |
| 5.2 | CVE-2026-0250
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App 6.3 | None on iOS < 6.3.3-h9 on Windows, < 6.3.3-h9 on macOS, < 6.3.5 on Android, < 6.3.5 on ChromeOS, < 6.3.3-h15 on Linux < 6.2.8-h10 on Windows, < 6.2.8-h10 on macOS < 6.1.14 on Android, < 6.1.14 on ChromeOS < 6.0.15 on Linux, < 6.0.13 on Windows, < 6.0.13 on macOS, < 6.0.15 on Android, < 6.0.15 on ChromeOS < 6.3.3-h10 on Windows | All on iOS >= 6.3.3-h9 on Windows, >= 6.3.3-h9 on macOS, >= 6.3.5 on Android, >= 6.3.5 on ChromeOS, >= 6.3.3-h15 on Linux (ETA: 10/06) >= 6.2.8-h10 on Windows, >= 6.2.8-h10 on macOS >= 6.1.14 on Android, >= 6.1.14 on ChromeOS >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.13 on Windows, >= 6.0.13 on macOS, >= 6.0.15 on Android (ETA: 10/29), >= 6.0.15 on ChromeOS (ETA: 10/29) >= 6.3.3-h10 on Windows | 2026-05-13 | 2026-10-02 |
| 4.9 | CVE-2026-0249
GlobalProtect App: Certificate Validation Bypass Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Windows, None on Linux, None on iOS, None on Windows UWP < 6.3.3-h9 (6.3.3-999) on macOS < 6.2.8-h10 (6.2.8-948) on macOS < 6.1.14 on Android, < 6.1.14 on ChromeOS < 6.0.14 on Android, < 6.0.14 on ChromeOS, < 6.0.13 on macOS | All on Windows, All on Linux, All on iOS, All on Windows UWP >= 6.3.3-h9 (6.3.3-999) on macOS >= 6.2.8-h10 (6.2.8-948) on macOS >= 6.1.14 on Android, >= 6.1.14 on ChromeOS >= 6.0.14 on Android, >= 6.0.14 on ChromeOS, >= 6.0.13 on macOS | 2026-05-13 | 2026-06-13 |
| 4.5 | CVE-2025-2183
GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on iOS, None on macOS < 6.3.3-h2 (6.3.3-c676) on Windows, < 6.3.3 on Linux < 6.2.8-h3 (6.2.8-c263) on Windows, All on Linux All on Windows, All on Linux < 6.0.12 on Windows, All on Linux None | All on Android, All on iOS, All on macOS >= 6.3.3-h2 (6.3.3-c676) on Windows*, >= 6.3.3 on Linux >= 6.2.8-h3 (6.2.8-c263) on Windows*, None on Linux None on Windows, None on Linux >= 6.0.12 on Windows*, None on Linux All | 2025-08-13 | 2025-08-13 |
| 4.3 | CVE-2025-2179
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on macOS < 6.2.9 on Linux All on Linux All on Linux None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on macOS >= 6.2.9 on Linux None on Linux None on Linux All | 2025-07-28 | 2025-07-28 |
| 5.7 | CVE-2025-0141
GlobalProtect App: Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS < 6.3.3-h1 (6.3.3-c650) on macOS, < 6.3.3-h1 (6.3.3-c650) on Windows < 6.2.8-h2 (6.2.8-c243) on macOS, < 6.2.8-h2 (6.2.8-c243) on Windows, < 6.2.8 on Linux All on macOS, All on Windows, All on Linux < 6.0.12 on macOS, < 6.0.12 on Windows, All on Linux None | All on Android, All on Chrome OS, All on iOS >= 6.3.3-h1 (6.3.3-c650) on macOS, >= 6.3.3-h1 (6.3.3-c650) on Windows >= 6.2.8-h2 (6.2.8-c243) on macOS, >= 6.2.8-h2 (6.2.8-c243) on Windows, >= 6.2.8 on Linux None on macOS, None on Windows, None on Linux >= 6.0.12 on macOS, >= 6.0.12 on Windows, None on Linux All | 2025-07-09 | 2025-07-18 |
| 4.3 | CVE-2025-0140
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on Linux < 6.3.3-h1 (6.3.3-c650) on macOS < 6.2.8-h2 (6.2.8-c243) on macOS All on macOS < 6.0.12 on macOS None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on Linux >= 6.3.3-h1 (6.3.3-c650) on macOS >= 6.2.8-h2 (6.2.8-c243) on macOS None on macOS >= 6.0.12 on macOS All | 2025-07-09 | 2025-07-28 |
| 0.3 | CVE-2025-4227
GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Linux, Android, iOS, Chrome OS, UWP ¹ < 6.3.3-h1 [6.3.3-c650] on Windows, macOS < 6.2.8-h2 [6.2.8-c243] on Windows, macOS All on Windows, macOS All on Windows, macOS | All on Linux, Android, iOS, Chrome OS, UWP ¹ >= 6.3.3-h1 [6.3.3-c650] on Windows, macOS >= 6.2.8-h2 [6.2.8-c243] on Windows, macOS None on Windows, macOS None on Windows, macOS | 2025-06-11 | 2025-06-13 |
| 5.7 | CVE-2025-4232
GlobalProtect: Authenticated Code Injection Through Wildcard on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Windows, Linux, Android, iOS, Chrome OS < 6.3.3 on macOS < 6.2.8-h2 [6.2.8-c243] on macOS All on macOS < 6.0.12 on macOS | All on Windows, Linux, Android, iOS, Chrome OS >= 6.3.3 on macOS >= 6.2.8-h2 [6.2.8-c243] on macOS None on macOS >= 6.0.12 on macOS | 2025-06-11 | 2025-07-16 |
| 1.9 | CVE-2025-0135
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on Linux < 6.3.3-h2 (6.3.3-c676) on macOS < 6.2.8-h3 (6.2.8-c263) on macOS All on macOS < 6.0.12 on macOS None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on Linux >= 6.3.3-h2 (6.3.3-c676) on macOS >= 6.2.8-h3 (6.2.8-c263) on macOS None on macOS >= 6.0.12 on macOS All | 2025-05-14 | 2025-07-31 |
| 4 | CVE-2025-0120
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on macOS, None on Linux, None on iOS, None on Android, None on Chrome OS < 6.3.3 on Windows < 6.2.7-1077 on Windows, < 6.2.8 on Windows All on Windows < 6.0.12 on Windows None | All on macOS, All on Linux, All on iOS, All on Android, All on Chrome OS >= 6.3.3 on Windows >= 6.2.7-1077 on Windows, >= 6.2.8 on Windows None on Windows >= 6.0.12 on Windows All | 2025-04-09 | 2025-05-02 |
| 4.3 | CVE-2025-0117
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on iOS, None on Android, None on Chrome OS, None on macOS < 6.3.3 on Windows < 6.2.6 on Windows All on Windows < 6.0.12 on Windows None | All on iOS, All on Android, All on Chrome OS, All on macOS >= 6.3.3 on Windows* >= 6.2.6 on Windows* None on Windows >= 6.0.12 on Windows* All | 2025-03-12 | 2025-09-30 |
| 2.2 | CVE-2025-0118
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on macOS, Linux, iOS, Android, Chrome OS < 6.3.3 on Windows < 6.2.5 on Windows < 6.1.6 on Windows < 6.0.11 on Windows None | All on macOS, Linux, iOS, Android, Chrome OS >= 6.3.3 on Windows >= 6.2.5 on Windows >= 6.1.6 on Windows >= 6.0.11 on Windows All | 2025-03-12 | 2025-03-12 |
| 5.6 | CVE-2024-5921
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on FIPS-CC mode < 6.3.2* on Windows, < 6.3.2* on macOS < 6.2.6* on Windows, < 6.2.6-c857* on macOS, < 6.2.1-c31* on Linux, < 6.2.6* on Windows UWP All on Windows, All on macOS, All on Linux, < 6.1.6* on Android, < 6.1.7* on iOS < 6.0.12* on Windows, All on macOS | All on FIPS-CC mode >= 6.3.2* on Windows, >= 6.3.2* on macOS >= 6.2.6* on Windows, >= 6.2.6-c857* on macOS, >= 6.2.1-c31* on Linux, >= 6.2.6* on Windows UWP (ETA: end of June) None on Windows, None on macOS, None on Linux, >= 6.1.6* on Android, >= 6.1.7* on iOS >= 6.0.12* on Windows, None on macOS | 2024-11-26 | 2025-05-02 |
| 2.4 | CVE-2024-9473
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect App 5.1 GlobalProtect UWP App | None on macOS, Linux, Chrome OS, Android, iOS < 6.3.1-c383 on Windows < 6.2.5 on Windows < 6.1.4-c720 on Windows < 6.0.10-c823 on Windows All on Windows None | All on macOS, Linux, Chrome OS, Android, iOS >= 6.3.1-c383 on Windows >= 6.2.5 on Windows >= 6.1.4-c720 on Windows >= 6.0.10-c823 on Windows None on Windows All | 2024-10-09 | 2025-08-11 |