SonicWall Global VPN Client vulnerabilities

7 CVEs affecting SonicWall Global VPN Client, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-66151, published 2026-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-6273, published 2007-12-07. High severity, CVSS 9.3. EPSS: 6.2% chance of exploitation in the next 30 days. Multiple format string vulnerabilities in the configuration file in SonicWALL GLobal VPN Client 3.1.556 and 4.0.0.810 allow user-assisted remote attackers to execute arbitrary code via format string…
CVE-2020-5145, published 2020-10-28. High severity, CVSS 8.6. EPSS: 1.2% chance of exploitation in the next 30 days. SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading (DLL hijacking) vulnerability. Successful exploitation could lead to remote code execution in the target…
CVE-2021-20047, published 2021-12-08. High severity, CVSS 7.8. EPSS: 0.9% chance of exploitation in the next 30 days. SonicWall Global VPN client version 4.10.6 (32-bit and 64-bit) and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code…
CVE-2021-20051, published 2022-05-04. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. SonicWall Global VPN Client 4.10.7.1117 installer (32-bit and 64-bit) and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation…
CVE-2020-5144, published 2020-10-28. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability.
CVE-2021-20037, published 2021-09-21. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. SonicWall Global VPN Client 4.10.5 installer (32-bit and 64-bit) incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host…
CVE-2026-66151, published 2026-08-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash.