CVE-2024-2432: Palo Alto Networks Globalprotect

High severity, CVSS 7.0. EPSS: 0.4% chance of exploitation in the next 30 days.

A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges. However, execution requires that the local user is able to successfully exploit a race condition.

Affected products

• Palo Alto Networks Globalprotect: from 5.1.0, before 5.1.12 (fixed in 5.1.12); from 6.0.0, before 6.0.8 (fixed in 6.0.8); from 6.1.0, before 6.1.2 (fixed in 6.1.2); version 6.2.0 only

Published 2024-03-13. Last modified 2026-06-17.