This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2026-0295 | BDVDB-2026-358580 Detail

Palo Alto NetworksGlobalProtect App

Description#

A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root. The GlobalProtect app on Linux, Windows, iOS, Android, and Chrome OS is not affected.

Impact#

CAPEC-29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions

Weaknesses#

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.