CVE-2021-3038: Palo Alto Networks Globalprotect

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.4.

Affected products

• Palo Alto Networks Globalprotect: from 5.1.0, before 5.1.8 (fixed in 5.1.8); from 5.2.0, before 5.2.4 (fixed in 5.2.4)

Published 2021-04-20. Last modified 2026-06-17.