Skip to content
fr Sign in
6.0 Medium

CVE-2025-0118 A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX…

Description

A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated user. However, to exploit this vulnerability, the authenticated user must navigate to a malicious page during the GlobalProtect SAML login process on a Windows device. This issue does not apply to the GlobalProtect app on other (non-Windows) platforms.

Affected products and versions

Product Affected versions Fixed in
GlobalProtect App Versions not published
GlobalProtect UWP App Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of GlobalProtect App

The 41 CVEs of GlobalProtect App →
CVE-2026-0314 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low… 4.3 Medium CVE-2026-0315 A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate… 5.9 Medium CVE-2026-0307 Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user… 5.9 Medium CVE-2026-0299 Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to… 5.9 Medium
Track this CVE