CVE-2023-0009: Palo Alto Networks Globalprotect

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A local privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows enables a local user to execute programs with elevated privileges.

Affected products

• Palo Alto Networks Globalprotect: before 5.2.13 (fixed in 5.2.13); from 6.0.0, before 6.0.5 (fixed in 6.0.5); version 6.1.0 only

Published 2023-06-14. Last modified 2026-06-17.