CVE-2026-0314
published 2026-10-14CVE-2026-0314: A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS)…
PriorityP419medium4.3CVSS 4.0
AVLACLATNPRLUINVCNVINVAHSCNSINSANEUCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUNRUVDREMUAmber
EPSS
0.10%
0.8th percentile
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| palo_alto_networks | globalprotect_app | >= 6.0.0 < 6.0.15 | 6.0.15 |
| palo_alto_networks | globalprotect_app | >= 6.2.0 < 6.2.8-h15 | 6.2.8-h15 |
| palo_alto_networks | globalprotect_app | >= 6.3.0 < 6.3.3-h16 | 6.3.3-h16 |
| paloalto | globalprotect_app | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
GlobalProtect App: Local Denial of Service (DoS) on Windows
vendor_paloalto·CVSS 4.3
CVE-2026-0314 [MEDIUM] CWE-843 GlobalProtect App: Local Denial of Service (DoS) on Windows
GlobalProtect App: Local Denial of Service (DoS) on Windows
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
Affected products: GlobalProtect App
Solution: VERSION MINOR VERSION SUGGESTED SOLUTION
GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later.
GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h14 Upgrade to 6.2.8-h15 (6.2.8-1084) or later.
GlobalProtect App 6.0 on Windows 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later.
GlobalProtect App on Linux No action needed.
GlobalProtect App on macOS No action need
GHSA
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
ghsa_unreviewed·2026-10-14
CVE-2026-0314 [MEDIUM] CWE-843 A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.
The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.
VulDB
Palo Alto Networks GlobalProtect App type confusion
vuldb·2026-10-14·CVSS 4.3
CVE-2026-0314 [MEDIUM] Palo Alto Networks GlobalProtect App type confusion
A vulnerability was found in Palo Alto Networks GlobalProtect App. It has been rated as problematic. This impacts an unknown function. This manipulation causes type confusion.
This vulnerability is registered as CVE-2026-0314. The attack needs to be launched locally. No exploit is available.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-14
Published