| 5.9 | CVE-2026-0307
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on ChromeOS < 6.3.3-h15 on Linux (ETA: 09/17), < 6.3.3-h15 on macOS (ETA: 09/28), < 6.3.3-h15 on Windows (ETA: 09/28) < 6.2.8-h14 on macOS (ETA: 09/28), < 6.2.8-h14 on Windows (ETA: 09/28) < 6.0.15 on Linux (ETA: 09/28), < 6.0.15 on macOS (ETA: 09/28), < 6.0.15 on Windows (ETA: 10/29) | All on iOS, All on Android, All on ChromeOS >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h15 on macOS (ETA: 09/28), >= 6.3.3-h15 on Windows (ETA: 09/28) >= 6.2.8-h14 on macOS (ETA: 09/28), >= 6.2.8-h14 on Windows (ETA: 09/28) >= 6.0.15 on Linux (ETA: 09/28), >= 6.0.15 on macOS (ETA: 09/28), >= 6.0.15 on Windows (ETA: 10/29) | 2026-09-09 | 2026-09-16 |
| 5.2 | CVE-2026-0298
GlobalProtect App: Code Execution Vulnerability in Windows Pre-Logon Access Provider (PLAP) | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on macOS, None on Android, None on Chrome OS, None on iOS < 6.3.3-h14 (6.3.3-1121) on Windows < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Windows | All on Linux, All on macOS, All on Android, All on Chrome OS, All on iOS >= 6.3.3-h14 (6.3.3-1121) on Windows >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.1 | CVE-2026-0295
GlobalProtect App: Local Privilege Escalation via Race Condition on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Linux, None on Windows, None on iOS, None on Android, None on Chrome OS < 6.3.3-h14 (6.3.3-1121) on macOS < 6.2.8-h13 (6.2.8-1045) on macOS < 6.0.15 on macOS | All on Linux, All on Windows, All on iOS, All on Android, All on Chrome OS >= 6.3.3-h14 (6.3.3-1121) on macOS >= 6.2.8-h13 (6.2.8-1045) on macOS >= 6.0.15 on macOS (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 5.2 | CVE-2026-0297
GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake | GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | < 6.3.3-h15 on Linux, < 6.3.3-h14 on macOS, < 6.3.3-h14 on Windows, < 6.3.5 on iOS, < 6.3.5 on Android, < 6.3.5 on Chrome OS All on Linux, < 6.2.8-h13 on macOS, < 6.2.8-h13 on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows, < 6.0.15 on iOS, < 6.0.15 on Android, < 6.0.15 on Chrome OS | >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 on macOS, >= 6.3.3-h14 on Windows, >= 6.3.5 on iOS, >= 6.3.5 on Android, >= 6.3.5 on Chrome OS None on Linux, >= 6.2.8-h13 on macOS, >= 6.2.8-h13 on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29), >= 6.0.15 on iOS (ETA: 10/29), >= 6.0.15 on Android (ETA: 10/29), >= 6.0.15 on Chrome OS (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 5.9 | CVE-2026-0299
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on Chrome OS < 6.3.3-h15 on Linux, < 6.3.3-h14 (6.3.3-1121) on macOS, < 6.3.3-h14 (6.3.3-1121) on Windows All on Linux, < 6.2.8-h13 (6.2.8-1045) on macOS, < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows | All on iOS, All on Android, All on Chrome OS >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.5 | CVE-2026-0296
GlobalProtect App: Improper Certificate Validation Bypass Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on iOS, None on Android, None on Chrome OS < 6.3.3-h15 on Linux, < 6.3.3-h14 (6.3.3-1121) on macOS, < 6.3.3-h14 (6.3.3-1121) on Windows All on Linux, < 6.2.8-h13 (6.2.8-1045) on macOS, < 6.2.8-h13 (6.2.8-1045) on Windows < 6.0.15 on Linux, < 6.0.15 on macOS, < 6.0.15 on Windows | All on iOS, All on Android, All on Chrome OS >= 6.3.3-h15 on Linux (ETA: 09/17), >= 6.3.3-h14 (6.3.3-1121) on macOS, >= 6.3.3-h14 (6.3.3-1121) on Windows None on Linux, >= 6.2.8-h13 (6.2.8-1045) on macOS, >= 6.2.8-h13 (6.2.8-1045) on Windows >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.15 on macOS (ETA: 10/29), >= 6.0.15 on Windows (ETA: 10/29) | 2026-08-12 | 2026-09-12 |
| 4.4 | CVE-2026-0267
GlobalProtect App: Information Exposure Vulnerability on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect UWP App | None on Windows, Linux, iOS, Android, Chrome OS < 6.3.3-h1 on macOS < 6.2.8-h2 on macOS None | All on Windows, Linux, iOS, Android, Chrome OS >= 6.3.3-h1 on macOS >= 6.2.8-h2 on macOS All | 2026-06-10 | 2026-06-10 |
| 7.1 | CVE-2026-0251
GlobalProtect App: Local Privilege Escalation Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.0 | None on Android, None on ChromeOS, None on iOS, None on UWP < 6.3.3-h11 (6.3.3-c1016) on Windows, < 6.3.3-h11 (6.3.3-c1016) on macOS, < 6.3.3-h2 (6.3.3-c42) on Linux < 6.2.8-h10 (6.2.8-948) on Windows, < 6.2.8-h10 (6.2.8-948) on macOS < 6.0.13 on Windows, < 6.0.13 on macOS, < 6.0.11 on Linux | All on Android, All on ChromeOS, All on iOS, All on UWP >= 6.3.3-h11 (6.3.3-c1016) on Windows, >= 6.3.3-h11 (6.3.3-c1016) on macOS, >= 6.3.3-h2 (6.3.3-c42) on Linux >= 6.2.8-h10 (6.2.8-948) on Windows, >= 6.2.8-h10 (6.2.8-948) on macOS >= 6.0.13 on Windows, >= 6.0.13 on macOS, >= 6.0.11 on Linux | 2026-05-13 | 2026-08-27 |
| 5.2 | CVE-2026-0250
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App 6.3 | None on iOS < 6.3.3-h9 on Windows, < 6.3.3-h9 on macOS, < 6.3.5 on Android, < 6.3.5 on ChromeOS, < 6.3.3-h15 on Linux < 6.2.8-h10 on Windows, < 6.2.8-h10 on macOS < 6.1.14 on Android, < 6.1.14 on ChromeOS < 6.0.15 on Linux, < 6.0.13 on Windows, < 6.0.13 on macOS, < 6.0.15 on Android, < 6.0.15 on ChromeOS < 6.3.3-h10 on Windows | All on iOS >= 6.3.3-h9 on Windows, >= 6.3.3-h9 on macOS, >= 6.3.5 on Android, >= 6.3.5 on ChromeOS, >= 6.3.3-h15 on Linux (ETA: 09/17) >= 6.2.8-h10 on Windows, >= 6.2.8-h10 on macOS >= 6.1.14 on Android, >= 6.1.14 on ChromeOS >= 6.0.15 on Linux (ETA: 10/29), >= 6.0.13 on Windows, >= 6.0.13 on macOS, >= 6.0.15 on Android (ETA: 10/29), >= 6.0.15 on ChromeOS (ETA: 10/29) >= 6.3.3-h10 on Windows | 2026-05-13 | 2026-09-12 |
| 4.9 | CVE-2026-0249
GlobalProtect App: Certificate Validation Bypass Vulnerabilities | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Windows, None on Linux, None on iOS, None on Windows UWP < 6.3.3-h9 (6.3.3-999) on macOS < 6.2.8-h10 (6.2.8-948) on macOS < 6.1.14 on Android, < 6.1.14 on ChromeOS < 6.0.14 on Android, < 6.0.14 on ChromeOS, < 6.0.13 on macOS | All on Windows, All on Linux, All on iOS, All on Windows UWP >= 6.3.3-h9 (6.3.3-999) on macOS >= 6.2.8-h10 (6.2.8-948) on macOS >= 6.1.14 on Android, >= 6.1.14 on ChromeOS >= 6.0.14 on Android, >= 6.0.14 on ChromeOS, >= 6.0.13 on macOS | 2026-05-13 | 2026-06-13 |
| 4.5 | CVE-2025-2183
GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on iOS, None on macOS < 6.3.3-h2 (6.3.3-c676) on Windows, < 6.3.3 on Linux < 6.2.8-h3 (6.2.8-c263) on Windows, All on Linux All on Windows, All on Linux < 6.0.12 on Windows, All on Linux None | All on Android, All on iOS, All on macOS >= 6.3.3-h2 (6.3.3-c676) on Windows*, >= 6.3.3 on Linux >= 6.2.8-h3 (6.2.8-c263) on Windows*, None on Linux None on Windows, None on Linux >= 6.0.12 on Windows*, None on Linux All | 2025-08-13 | 2025-08-13 |
| 4.3 | CVE-2025-2179
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on macOS < 6.2.9 on Linux All on Linux All on Linux None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on macOS >= 6.2.9 on Linux None on Linux None on Linux All | 2025-07-28 | 2025-07-28 |
| 5.7 | CVE-2025-0141
GlobalProtect App: Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS < 6.3.3-h1 (6.3.3-c650) on macOS, < 6.3.3-h1 (6.3.3-c650) on Windows < 6.2.8-h2 (6.2.8-c243) on macOS, < 6.2.8-h2 (6.2.8-c243) on Windows, < 6.2.8 on Linux All on macOS, All on Windows, All on Linux < 6.0.12 on macOS, < 6.0.12 on Windows, All on Linux None | All on Android, All on Chrome OS, All on iOS >= 6.3.3-h1 (6.3.3-c650) on macOS, >= 6.3.3-h1 (6.3.3-c650) on Windows >= 6.2.8-h2 (6.2.8-c243) on macOS, >= 6.2.8-h2 (6.2.8-c243) on Windows, >= 6.2.8 on Linux None on macOS, None on Windows, None on Linux >= 6.0.12 on macOS, >= 6.0.12 on Windows, None on Linux All | 2025-07-09 | 2025-07-18 |
| 4.3 | CVE-2025-0140
GlobalProtect App: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on Linux < 6.3.3-h1 (6.3.3-c650) on macOS < 6.2.8-h2 (6.2.8-c243) on macOS All on macOS < 6.0.12 on macOS None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on Linux >= 6.3.3-h1 (6.3.3-c650) on macOS >= 6.2.8-h2 (6.2.8-c243) on macOS None on macOS >= 6.0.12 on macOS All | 2025-07-09 | 2025-07-28 |
| 5.7 | CVE-2025-4232
GlobalProtect: Authenticated Code Injection Through Wildcard on macOS | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Windows, Linux, Android, iOS, Chrome OS < 6.3.3 on macOS < 6.2.8-h2 [6.2.8-c243] on macOS All on macOS < 6.0.12 on macOS | All on Windows, Linux, Android, iOS, Chrome OS >= 6.3.3 on macOS >= 6.2.8-h2 [6.2.8-c243] on macOS None on macOS >= 6.0.12 on macOS | 2025-06-11 | 2025-07-16 |
| 0.3 | CVE-2025-4227
GlobalProtect App: Interception in Endpoint Traffic Policy Enforcement | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on Linux, Android, iOS, Chrome OS, UWP ¹ < 6.3.3-h1 [6.3.3-c650] on Windows, macOS < 6.2.8-h2 [6.2.8-c243] on Windows, macOS All on Windows, macOS All on Windows, macOS | All on Linux, Android, iOS, Chrome OS, UWP ¹ >= 6.3.3-h1 [6.3.3-c650] on Windows, macOS >= 6.2.8-h2 [6.2.8-c243] on Windows, macOS None on Windows, macOS None on Windows, macOS | 2025-06-11 | 2025-06-13 |
| 1.9 | CVE-2025-0135
GlobalProtect App on macOS: Non Admin User Can Disable the GlobalProtect App | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on Android, None on Chrome OS, None on iOS, None on Windows, None on Linux < 6.3.3-h2 (6.3.3-c676) on macOS < 6.2.8-h3 (6.2.8-c263) on macOS All on macOS < 6.0.12 on macOS None | All on Android, All on Chrome OS, All on iOS, All on Windows, All on Linux >= 6.3.3-h2 (6.3.3-c676) on macOS >= 6.2.8-h3 (6.2.8-c263) on macOS None on macOS >= 6.0.12 on macOS All | 2025-05-14 | 2025-07-31 |
| 4 | CVE-2025-0120
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on macOS, None on Linux, None on iOS, None on Android, None on Chrome OS < 6.3.3 on Windows < 6.2.7-1077 on Windows, < 6.2.8 on Windows All on Windows < 6.0.12 on Windows None | All on macOS, All on Linux, All on iOS, All on Android, All on Chrome OS >= 6.3.3 on Windows >= 6.2.7-1077 on Windows, >= 6.2.8 on Windows None on Windows >= 6.0.12 on Windows All | 2025-04-09 | 2025-05-02 |
| 4.3 | CVE-2025-0117
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on iOS, None on Android, None on Chrome OS, None on macOS < 6.3.3 on Windows < 6.2.6 on Windows All on Windows < 6.0.12 on Windows None | All on iOS, All on Android, All on Chrome OS, All on macOS >= 6.3.3 on Windows* >= 6.2.6 on Windows* None on Windows >= 6.0.12 on Windows* All | 2025-03-12 | 2025-09-30 |
| 2.2 | CVE-2025-0118
GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect UWP App | None on macOS, Linux, iOS, Android, Chrome OS < 6.3.3 on Windows < 6.2.5 on Windows < 6.1.6 on Windows < 6.0.11 on Windows None | All on macOS, Linux, iOS, Android, Chrome OS >= 6.3.3 on Windows >= 6.2.5 on Windows >= 6.1.6 on Windows >= 6.0.11 on Windows All | 2025-03-12 | 2025-03-12 |
| 5.6 | CVE-2024-5921
GlobalProtect App: Insufficient Certificate Validation Leads to Privilege Escalation | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 | None on FIPS-CC mode < 6.3.2* on Windows, < 6.3.2* on macOS < 6.2.6* on Windows, < 6.2.6-c857* on macOS, < 6.2.1-c31* on Linux, < 6.2.6* on Windows UWP All on Windows, All on macOS, All on Linux, < 6.1.6* on Android, < 6.1.7* on iOS < 6.0.12* on Windows, All on macOS | All on FIPS-CC mode >= 6.3.2* on Windows, >= 6.3.2* on macOS >= 6.2.6* on Windows, >= 6.2.6-c857* on macOS, >= 6.2.1-c31* on Linux, >= 6.2.6* on Windows UWP (ETA: end of June) None on Windows, None on macOS, None on Linux, >= 6.1.6* on Android, >= 6.1.7* on iOS >= 6.0.12* on Windows, None on macOS | 2024-11-26 | 2025-05-02 |
| 2.4 | CVE-2024-9473
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect App 5.1 GlobalProtect UWP App | None on macOS, Linux, Chrome OS, Android, iOS < 6.3.1-c383 on Windows < 6.2.5 on Windows < 6.1.4-c720 on Windows < 6.0.10-c823 on Windows All on Windows None | All on macOS, Linux, Chrome OS, Android, iOS >= 6.3.1-c383 on Windows >= 6.2.5 on Windows >= 6.1.4-c720 on Windows >= 6.0.10-c823 on Windows None on Windows All | 2024-10-09 | 2025-08-11 |
| i | CVE-2024-47076
Informational: No Impact of CUPS Vulnerabilities on Palo Alto Networks Products | Cloud NGFW Cortex XDR Cortex XDR Agent Cortex XSIAM Cortex XSOAR GlobalProtect App PAN-OS Prisma Access Prisma Browser Prisma Cloud Prisma Cloud Compute Prisma SD-WAN | None None None None None None None None None None None None | All All All All All All All All All All All All | 2024-09-26 | 2024-09-26 |
| 6.9 | CVE-2024-8687
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes | Cloud NGFW GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect App 5.2 GlobalProtect App 5.1 PAN-OS 11.2 PAN-OS 11.1 PAN-OS 11.0 PAN-OS 10.2 PAN-OS 10.1 PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 Prisma Access | None None < 6.2.1 < 6.1.2 < 6.0.7 < 5.2.13 < 5.1.12 None None < 11.0.1 < 10.2.4 < 10.1.9 < 10.0.12 < 9.1.16 < 9.0.17 < 8.1.25 < 10.2.9 on PAN-OS | All All >= 6.2.1 >= 6.1.2 >= 6.0.7 >= 5.2.13 >= 5.1.12 All All >= 11.0.1 >= 10.2.4 >= 10.1.9 >= 10.0.12 >= 9.1.16 >= 9.0.17 >= 8.1.25 >= 10.2.9 on PAN-OS | 2024-09-11 | 2024-09-11 |
| 5.2 | CVE-2024-5915
GlobalProtect App: Local Privilege Escalation (PE) Vulnerability | GlobalProtect App 6.3 GlobalProtect App 6.2 GlobalProtect App 6.1 GlobalProtect App 6.0 GlobalProtect App 5.1 | < 6.3.1 on Windows < 6.2.4 on Windows < 6.1.5 on Windows < 6.0.10-c826 on Windows < 5.1.x on Windows | >= 6.3.1 on Windows >= 6.2.4 on Windows >= 6.1.5 on Windows >= 6.0.10-c826 on Windows >= 5.1.x (ETA: December 2024) on Windows | 2024-08-14 | 2024-11-06 |