CVE-2020-8239: Pulse Secure Desktop Client

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

A vulnerability in the Pulse Secure Desktop Client < 9.1R9 is vulnerable to the client registry privilege escalation attack. This fix also requires Server Side Upgrade due to Standalone Host Checker Client (Windows) and Windows PDC.

Affected products

• Pulse Secure Pulse Secure Desktop Client: before 9.1 (fixed in 9.1); version 9.1 only

Published 2020-10-28. Last modified 2026-06-17.