Palo Alto Networks discloses CVE-2026-0307 local privilege escalation flaws in GlobalProtect App across all platforms

Linha do tempo

1. security.paloaltonetworks.com ↗ · pub. 16/10/2026 21:55 · coletado 20/10 16:32 primeiro registro

   Palo Alto Networks discloses CVE-2026-0307 local privilege escalation flaws in GlobalProtect App across all platforms

   ler a análise desta fonte ocultar

   Palo Alto Networks PSIRT published advisory CVE-2026-0307 covering local privilege escalation vulnerabilities in the GlobalProtect App. The affected product list spans Linux, macOS, Windows, iOS, Android and ChromeOS clients. The advisory excerpt provided contains no CVSS score, exploitation status, technical root cause or fix details, so the operational urgency cannot be fully assessed from this text. Defenders running GlobalProtect App should consult the full vendor advisory for fixed versions and any exploitation notes.

   Technical Details

   • Vulnerability class: local privilege escalation, which requires local access to the endpoint.
   • Affected GlobalProtect App versions listed: 6.0.0 through 6.0.14 (6.0.9 is not listed) and 6.3.0 through 6.3.3.
   • Platforms listed: Linux, macOS, Windows, iOS, Android and ChromeOS.
   • The article does not describe the vulnerable component, the exploitation mechanism or whether exploitation has occurred in the wild.