Summary
Ein Angreifer kann mehrere Schwachstellen in Palo Alto Networks GlobalProtect App ausnutzen, um Administratorrechte zu erlangen, beliebigen Code mit Administratorrechten auszuführen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Denial-of-Service-Zustand herbeizuführen.
Product
GlobalProtect von PaloAlto ist eine Sicherheitsplattform.
Vulnerabilities 3
-
Medium 5.9
GlobalProtect App: Local Privilege Escalation Vulnerabilities
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allow a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows and root on macOS and Linux. This enables a non-administrative user to execute a…
-
Medium 5.2
GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway
A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the…
-
Medium 4.9
GlobalProtect App: Certificate Validation Bypass Vulnerabilities
Multiple improper certificate validation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enables an attacker to intercept encrypted communications and potentially compromise the endpoint. This can enable a local non-administrative operating syste…
Revision history
-
#1
Initiale Fassung
References
-
Palo Alto Networks Security Advisory vom 2026-05-13
https://security.paloaltonetworks.com/CVE-2026-0249
-
Palo Alto Networks Security Advisory vom 2026-05-13
https://security.paloaltonetworks.com/CVE-2026-0250
-
Palo Alto Networks Security Advisory vom 2026-05-13
https://security.paloaltonetworks.com/CVE-2026-0251