← CVE Intelligence

CVE-2026-0297

GlobalProtect App: Buffer Overflow Vulnerability during UDP Tunnel Handshake PUBLISHED

Description (CNA)

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges (SYSTEM privileges on Windows, and root privileges on macOS and Linux).

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / GlobalProtect Appaffected 6.3.0 before 6.3.3-h15; affected 6.2.0; affected 6.0.0 before 6.0.15
Palo Alto Networks / GlobalProtect Appaffected 6.3.0 before 6.3.3-h14; affected 6.2.0 before 6.2.8-h13; affected 6.0.0 before 6.0.15
Palo Alto Networks / GlobalProtect Appaffected 6.3.0 before 6.3.5; affected 6.0.0 before 6.0.15

CWE

CWE-787

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.