Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-2432

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Published

2024-03-13T18:15:08.603

Last Modified

2025-09-26T19:10:56.553

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-269
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application paloaltonetworks globalprotect < 5.1.12 Yes
Application paloaltonetworks globalprotect < 6.0.8 Yes
Application paloaltonetworks globalprotect < 6.1.2 Yes
Application paloaltonetworks globalprotect 6.2.0 Yes
References