Globalprotect Uwp App CVEs and Security Vulnerabilities

CVE-2026-0267

GlobalProtect App: Information Exposure Vulnerability on macOS

An information exposure vulnerability in the Palo Alto Networks GlobalProtect app on macOS enables a local user to learn the configured passcodes for disabling, disconnecting, or uninstalling the GlobalProtect app. After the passcode is known, the user can perform these actions even if the GlobalProtect app configuration would not normally permit them to do so.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed

Vendors

Palo Alto Networks Paloaltonetworks

Products

Globalprotect App Globalprotect Uwp App Globalprotect

CVE-2026-0250

GlobalProtect App: Buffer Overflow Vulnerability during connection to Portal or Gateway

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway. The GlobalProtect app on iOS is not affected.

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed