CVE-2025-0117

No fix known EPSS <1%CVSS 7.1

A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected.

Published 2025-03-12 · CVE record · OSV

Products: Palo Alto Networks GlobalProtect App, Palo Alto Networks GlobalProtect UWP App