Known vulnerabilities in GlobalProtect app for Windows
Vendor:
Palo Alto Networks, Inc.
Software:
GlobalProtect app for Windows
Software CPE:
cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:*:*:*
Website:
https://www.paloaltonetworks.com/
Total vulnerabilities:
18
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9
Breakdown by Severity Chart
6.3.3-h10
6.0.13
6.2.8-h10
6.3.3-h9
6.0.14
6.1.13
6.3.2-h9
6.3.3-h2
6.2.8-h3
6.1.9
6.2.8-c243
6.3.3-h1
6.0.0
6.0.1
6.0.2
6.0.3
6.0.4
6.0.5
6.0.6
6.0.10
6.1.7
6.2.8-h2
6.3.2-566
6.3
6.2
6.1
6.0
6.2.7
6.3.1
6.3.2
6.2.8
6.2.7-h3
6.1.6
6.0.11
6.3.3
6.2.6
6.2.5
5.2.13
6.0.7
5.1.11
5.1.10
5.1.9
5.1.8
5.1.7
5.1.6
5.1.5
5.1.4
5.1.3
5.1.2
5.1.1
5.1.0
6.1.4
6.1.2
6.1.1
6.1.0
6.2.2
6.2.1
6.2.0
6.3.0
6.1.5
6.2.4
5.1.12
6.0.8
6.1.3
6.2.3
Vulnerabilities (18)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU131549 - Untrusted Search Path CVE-2026-0251 |
CWE-426 | Low | 6.0.11, 6.0.13, 6.2.8-h10, 6.3.3-h2 | 15.05.2026 |
SB2026051514 |
||
| #VU131548 - Out-of-bounds write CVE-2026-0250 |
CWE-787 | Medium | 6.0.11, 6.0.13, 6.0.14, 6.1.13, 6.2.8-h10, 6.3.3-h2, 6.3.3-h9 | 15.05.2026 |
SB2026051513 |
||
| #VU131547 - Improper Certificate Validation CVE-2026-0249 |
CWE-295 | Medium | 6.0.13, 6.0.14, 6.1.13, 6.2.8-h10, 6.3.3-h9 | 15.05.2026 |
SB2026051512 |
||
| #VU114078 - Improper Certificate Validation CVE-2025-2183 |
CWE-295 | Medium | 6.2.8-h3, 6.3.2-h9, 6.3.3, 6.3.3-h2 | 14.08.2025 |
SB2025081419 |
||
| #VU112710 - Untrusted Search Path CVE-2025-0141 |
CWE-426 | Low | 6.2.8, 6.2.8-h2, 6.3.3-h1 | 10.07.2025 |
SB2025071015 |
||
| #VU112709 - Incorrect Privilege Assignment CVE-2025-0140 |
CWE-266 | Low | 6.2.8, 6.2.8-h2, 6.3.3-h1 | 10.07.2025 |
SB2025071015 |
||
| #VU111100 - Improper Neutralization of Wildcards or Matching Symbols CVE-2025-4232 |
CWE-155 | Low | 6.2.8-h2, 6.3.3 | 12.06.2025 |
SB2025061229 |
||
| #VU111094 - Cleartext Transmission of Sensitive Information CVE-2025-4227 |
CWE-319 | Low | 6.2.8-h2, 6.3.2-566 | 12.06.2025 |
SB2025061217 |
||
| #VU109207 - Incorrect Privilege Assignment CVE-2025-0135 |
CWE-266 | Low | 6.2.8, 6.3.3 | 15.05.2025 |
SB2025051544 |
||
| #VU109204 - Incorrect Privilege Assignment CVE-2025-0131 |
CWE-266 | Low | 6.2.8, 6.3.3 | 15.05.2025 |
SB2025051538 SB2025051539 |
||
| #VU107394 - Execution with Unnecessary Privileges CVE-2025-0120 |
CWE-250 | Low | 6.2.7-h3, 6.2.8, 6.3.3 | 11.04.2025 |
SB2025041132 |
||
| #VU105701 - Exposed Unsafe ActiveX Method CVE-2025-0118 |
CWE-618 | Medium | 6.0.11, 6.1.6, 6.2.5, 6.3.3 | 13.03.2025 |
SB2025031340 |
||
| #VU105700 - Reliance on Untrusted Inputs in a Security Decision CVE-2025-0117 |
CWE-807 | Low | 6.2.6, 6.3.3 | 13.03.2025 |
SB2025031339 |
||
| #VU100915 - Improper Certificate Validation CVE-2024-5921 |
CWE-295 | Low | 6.2.6 | 26.11.2024 |
SB2024112602 |
||
| #VU98349 - Execution with Unnecessary Privileges CVE-2024-9473 |
CWE-250 | Low | 6.2.5 | 10.10.2024 |
SB2024101022 |
||
| #VU97293 - Exposure of sensitive information to an unauthorized actor CVE-2024-8687 |
CWE-200 | Low | 5.1.12, 5.2.13, 6.0.7, 6.1.2, 6.2.1 | 16.09.2024 |
SB2024091612 |
||
| #VU96011 - Incorrect Permission Assignment for Critical Resource CVE-2024-5915 |
CWE-732 | Low | 6.1.5, 6.2.4 | 14.08.2024 |
SB2024081466 |
||
| #VU94366 - Information Exposure Through Log Files CVE-2024-5908 |
CWE-532 | Medium | 5.1.12, 6.0.8, 6.1.3, 6.2.3 | 16.07.2024 |
SB2024071627 |