CVE-2026-0314
CVE-2026-0314 · GlobalProtect App: Local Denial of Service (DoS) on Windows
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
CVSS 4.3 · Medium · EPSS 0.1% · Fix available
- Published
- Updated
Affected products and versions
globalprotect app
- Versions
- ≥ 6.3.0, < 6.3.3-h16: Affected; ≥ 6.3.3-h16: Not affected (custom)
- ≥ 6.2.0, < 6.2.8-h15: Affected; ≥ 6.2.8-h15: Not affected (custom)
- ≥ 6.0.0, < 6.0.15: Affected; ≥ 6.0.15: Not affected (custom)
Update to 6.0.15; Update to 6.2.8-h15; Update to 6.3.3-h16
globalprotect app
- Versions
- ≥ All, < 12.2.4: Not affected; ≥ 12.2.4: Not affected (custom)
No fix published