CyberCVE

CVE-2026-0314

GlobalProtect App: Local Denial of Service (DoS) on Windows

Severity
Medium 4.3
CVSS 4.0
Adjacent, local or physical access what this means
Exploited
Not listed
EPSS
0.001
0.8th percentile
Discovered by
Third party
Vendor-published field
Published
Oct 14, 2026
Assigned by palo_alto

Description

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

Weakness: CWE-843

Affected products

Vendor Product Category Matched by
Palo Alto Networks GlobalProtect VPN & Remote Access cna-assigner
Vendor-reported products (2)
  • Palo Alto Networks · GlobalProtect App
  • Palo Alto Networks · GlobalProtect App — vendor states not affected

Credit

Artemy Tsetsersky

Vendor remediation

VersionMinor VersionSuggested SolutionGlobalProtect App 6.3 on Windows6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on Windows6.2.0 through 6.2.8-h14Upgrade to 6.2.8-h15 (6.2.8-1084) or later.GlobalProtect App 6.0 on Windows6.0.0 through 6.0.14Upgrade to 6.0.15 or later. GlobalProtect App on Linux No action needed.GlobalProtect App on macOS No action needed.GlobalProtect App on iOS No action needed.GlobalProtect App on Android No action needed.GlobalProtect App on Chrome OS No action needed.All older unsupported GlobalProtect App versions Upgrade to a supported fixed version.

References

Something wrong here?