CVE-2026-0314: GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM)
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.3-h16Fixed in 6.2.8-h15Fixed in 6.0.15 - Upgrade
Upgrade
Palo Alto Networks GlobalProtect App for Windowsto a version that resolves this vulnerability.Fixed in 6.0.15 - Upgrade
Upgrade
Palo Alto Networks GlobalProtect App for Windowsto a version that resolves this vulnerability.Fixed in 6.2.8-h15 - Upgrade
Upgrade
Palo Alto Networks GlobalProtect App for Windowsto a version that resolves this vulnerability.Fixed in 6.3.3-h16
Event History
Frequently Asked Questions
Which systems are affected?
The vulnerability affects the Palo Alto Networks GlobalProtect app on Windows. GlobalProtect apps on Linux, macOS, iOS, Android, and Chrome OS are not affected.
What access does an attacker need to exploit this issue?
An attacker must be a local Windows user with low privileges. The provided information does not indicate that remote access or user interaction is required.
What is the expected impact of successful exploitation?
Successful exploitation can cause a denial-of-service condition in the GlobalProtect app. The supplied severity vector indicates availability impact without stated confidentiality or integrity impact.