7.1
Élevée
CVE-2025-0120 A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices…
Description
A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GlobalProtect App | Versions non publiées | |
| GlobalProtect UWP App | Versions non publiées |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de GlobalProtect App
Les 41 CVE de GlobalProtect App →
CVE-2026-0314
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low…
4.3
Moyenne
CVE-2026-0315
A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate…
5.9
Moyenne
CVE-2026-0307
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user…
5.9
Moyenne
CVE-2026-0299
Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to…
5.9
Moyenne