Skip to content
Sign in
7.4 High

CVE-2022-0016 An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the…

Description

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.

Affected products and versions

Product Affected versions Fixed in
GlobalProtect App Versions not published

Other CVEs of GlobalProtect App

The 41 CVEs of GlobalProtect App →
CVE-2026-0314 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low… 4.3 Medium CVE-2026-0315 A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate… 5.9 Medium CVE-2026-0307 Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user… 5.9 Medium CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to… 5.9 Medium
Track this CVE