PaloAlto Networks GlobalProtect: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.1
  CVE-2025-0117 Public exploit

  GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

  A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linu…

  Palo Alto Networks GlobalProtect App GlobalProtect UWP App Network devices
  Mar 12, 2025
• Medium 6.0
  CVE-2025-0118

  GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability

  A vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a remote attacker to run ActiveX controls within the context of an authenticated Windows user. This enables the attacker to run commands as if they are a legitimate authenticated us…

  Palo Alto Networks GlobalProtect App GlobalProtect UWP App Network devices
  Mar 12, 2025

Revision history

1. 2025-03-12 #1

   Initiale Fassung

References

• Palo Alto Networks Security Advisories vom 2025-03-12
  https://security.paloaltonetworks.com/CVE-2025-0118
• Palo Alto Networks Security Advisories vom 2025-03-12
  https://security.paloaltonetworks.com/CVE-2025-0117