Medium · 4.3 CVE-2026-0314 EUVD-2026-101672GHSA-xpxj-xmc7-f5qw

GlobalProtect App: Local Denial of Service (DoS) on Windows

Published Oct 14, 2026 · Updated Oct 15, 2026 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: GlobalProtect App Category: Network devices

Description

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.

The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto Networks	GlobalProtect App	6.3.0 – < 6.3.3-h16, 6.2.0 – < 6.2.8-h15, 6.0.0 – < 6.0.15	6.3.3-h16

Advisories 1

WID-SEC-2026-3962 Palo Alto Networks GlobalProtect: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2026

References

PAN-OS Security Advisory vendor-advisory