CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Palo Alto Networks Security Advisories / CVE-2026-0250

CVE-2026-0250 GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

Urgency MODERATE

Severity 5.2 · MEDIUM

Exploit Maturity UNREPORTED

Response Effort MODERATE

Recovery USER

Value Density DIFFUSE

Attack Vector ADJACENT

Attack Complexity LOW

Attack Requirements PRESENT

Automatable NO

User Interaction NONE

Product Confidentiality HIGH

Product Integrity HIGH

Product Availability HIGH

Privileges Required NONE

Subsequent Confidentiality NONE

Subsequent Integrity NONE

Subsequent Availability NONE

CVE JSON CSAF

Published 2026-05-13

Updated 2026-05-28

Discovered internally

Description

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.

The GlobalProtect app on iOS is not affected.

Product Status

Versions	Affected	Unaffected
GlobalProtect App	None on iOS	All on iOS
GlobalProtect App 6.3	< 6.3.3-h9 (6.3.3-999) on Windows < 6.3.3-h9 (6.3.3-999) on macOS < 6.3.4 on Android < 6.3.4 on ChromeOS < 6.3.3-h3 on Linux	>= 6.3.3-h9 (6.3.3-999) on Windows >= 6.3.3-h9 (6.3.3-999) on macOS >= 6.3.4 on Android (ETA: 06/30) >= 6.3.4 on ChromeOS (ETA: 06/30) >= 6.3.3-h3 on Linux (ETA: 06/30)
GlobalProtect App 6.2	< 6.2.8-h10 (6.2.8-948) on Windows < 6.2.8-h10 (6.2.8-948) on macOS	>= 6.2.8-h10 (6.2.8-948) on Windows >= 6.2.8-h10 (6.2.8-948) on macOS
GlobalProtect App 6.1	< 6.1.14 on Android < 6.1.14 on ChromeOS	>= 6.1.14 on Android (ETA: 06/02) >= 6.1.14 on ChromeOS (ETA: 06/02)
GlobalProtect App 6.0	< 6.0.12 on Linux < 6.0.13 on Windows < 6.0.13 on macOS < 6.0.15 on Android < 6.0.15 on ChromeOS	>= 6.0.12 on Linux (ETA: 06/30) >= 6.0.13 on Windows >= 6.0.13 on macOS >= 6.0.15 on Android (ETA: 06/30) >= 6.0.15 on ChromeOS (ETA: 06/30)
GlobalProtect UWP App 6.3	< 6.3.3-h10 on Windows	>= 6.3.3-h10 on Windows (ETA: 06/04)

Required Configuration for Exposure

No special configuration is required to be affected by this issue.

Severity: MEDIUM, Suggested Urgency: MODERATE

CVSS-BT: 5.2 / CVSS-B: 7.7 (CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber)

Exploitation Status

Palo Alto Networks is not aware of any malicious exploitation of this issue.

Weakness Type and Impact

CWE-787 Out-of-bounds Write

CAPEC-540 Overread Buffers

Solution

Version	Minor Version	Suggested Solution
GlobalProtect App 6.3 on Windows	6.3.0 through 6.3.3-h8	Upgrade to 6.3.3-h9 (6.3.3-999) or later.
GlobalProtect App 6.2 on Windows	6.2.0 through 6.2.8-h9	Upgrade to 6.2.8-h10 (6.2.8-948) or later.
GlobalProtect App 6.0 on Windows	6.0.0 through 6.0.12	Upgrade to 6.0.13 or later.
GlobalProtect App 6.0 on Linux	6.0.0 through 6.0.10	Upgrade to 6.0.11 or later.
GlobalProtect App 6.2/6.3 on Linux	6.2.0 through 6.3.3-h1	Upgrade to 6.3.3-h3 or later.
GlobalProtect App 6.3 on macOS	6.3.0 through 6.3.3-h8	Upgrade to 6.3.3-h9 (6.3.3-999) or later.
GlobalProtect App 6.2 on macOS	6.2.0 through 6.2.8-h9	Upgrade to 6.2.8-h10 (6.2.8-948) or later.
GlobalProtect App 6.0 on macOS	6.0.0 through 6.0.12	Upgrade to 6.0.13 or later.
GlobalProtect App 6.3 on Android	6.3.0 through 6.3.3	Upgrade to 6.3.4 or later.
GlobalProtect App 6.1 on Android	6.1.0 through 6.1.13	Upgrade to 6.1.14 or 6.3.4 or later.
GlobalProtect App 6.0 on Android	6.0.0 through 6.0.13	Upgrade to 6.0.14 or 6.1.14 or 6.3.4 or later.
GlobalProtect App 6.3 on ChromeOS	6.3.0 through 6.3.3	Upgrade to 6.3.4 or later.
GlobalProtect App 6.1 on ChromeOS	6.1.0 through 6.1.13	Upgrade to 6.1.14 or 6.3.4 or later.
GlobalProtect App 6.0 on ChromeOS	6.0.0 through 6.0.13	Upgrade to 6.0.14 or 6.1.14 or 6.3.4 or later.
GlobalProtect UWP App	6.1.0 through 6.3.3-h9	Upgrade to 6.3.3-h10 or later.
GlobalProtect App on iOS		No action needed

Workarounds and Mitigations

No known workarounds exist for this issue.

Acknowledgments

Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.

CPEs

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:macOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Android:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:ChromeOS:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Linux:*:*

cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Linux:*:*