Type Confusion Vulnerability in Palo Alto Networks GlobalProtect App
CVE-2026-0314

4.3MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Globalprotect App
Vendor
CVE Published:
14 October 2026

Badges

👾 Exploit Exists

What is CVE-2026-0314?

A vulnerability exists in the Palo Alto Networks GlobalProtect app for Windows, where a type confusion flaw can allow a local user with low privileges to exploit the application, potentially leading to a denial of service (DoS) condition. The issue is specific to the Windows version of the GlobalProtect app, while other platforms such as Linux, macOS, iOS, Android, and Chrome OS remain unaffected. Users are advised to review the security advisory for best practices and potential mitigations.

Affected Version(s)

GlobalProtect App Windows 6.3.0 < 6.3.3-h16

GlobalProtect App Windows 6.2.0 < 6.2.8-h15

GlobalProtect App Windows 6.0.0 < 6.0.15

References

https://security.paloaltonetworks.com/CVE-2026-0314
vendor-advisory

CVSS V4

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Artemy Tsetsersky
an internal security researcher
.