Skip to content
CVE PROGRAM SOURCE RECORD5.2 Medium

CVE-2026-0297

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.3.0 to < 6.3.3-h15affected
  • 6.2.0affected
  • 6.0.0 to < 6.0.15affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.3.0 to < 6.3.3-h14affected
  • 6.2.0 to < 6.2.8-h13affected
  • 6.0.0 to < 6.0.15affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 6.3.0 to < 6.3.5affected
  • 6.0.0 to < 6.0.15affected

References