CVE-2024-2432

published 2024-03-13

CVE-2024-2432: A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated…

Priority P4 33 high 7 CVSS 3.1

AV L AC H PR L UI N S U C H I H A H

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
palo_alto_networks	globalprotect_app	>= 5.1 < 5.1.12	5.1.12
palo_alto_networks	globalprotect_app	>= 6.0 < 6.0.8	6.0.8
palo_alto_networks	globalprotect_app	>= 6.1 < 6.1.2	6.1.2
palo_alto_networks	globalprotect_app	>= 6.2 < 6.2.1	6.2.1
paloalto	globalprotect_app	—	—
paloaltonetworks	globalprotect	—	—
paloaltonetworks	globalprotect	>= 5.1.0 < 5.1.12	5.1.12
paloaltonetworks	globalprotect	>= 6.0.0 < 6.0.8	6.0.8
paloaltonetworks	globalprotect	>= 6.1.0 < 6.1.2	6.1.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269