6.0
Moyenne
CVE-2025-0118 A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX…
Description
A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GlobalProtect App | Versions non publiées | |
| GlobalProtect UWP App | Versions non publiées |
Autres CVE de GlobalProtect App
Les 41 CVE de GlobalProtect App →
CVE-2026-0314
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low…
4.3
Moyenne
CVE-2026-0315
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate…
5.9
Moyenne
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user…
5.9
Moyenne
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to…
5.9
Moyenne