Ce mail provient de l'extérieur, restons vigilants ===================================================================== CERT-Renater Note d'Information No. 2026/VULN1027 _____________________________________________________________________ DATE : 15/10/2026 HARDWARE PLATFORM(S): / OPERATING SYSTEM(S): macOS running GlobalProtect App versions prior to 6.3.3-h16 (6.3.3-1199), 6.2.8-h15 (6.2.8-1084), Windows running GlobalProtect App versions prior to 6.3.3-h16 (6.3.3-1199), 6.2.8-h15 (6.2.8-1084), 6.0.15. ==================================================================== https://security.paloaltonetworks.com/CVE-2026-0315 https://security.paloaltonetworks.com/CVE-2026-0314 _____________________________________________________________________ CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS Urgency MODERATE Severity 5.9 · MEDIUM Exploit Maturity UNREPORTED Response Effort MODERATE Recovery USER Value Density DIFFUSE Attack Vector LOCAL Attack Complexity LOW Attack Requirements NONE Automatable NO User Interaction NONE Product Confidentiality HIGH Product Integrity HIGH Product Availability HIGH Privileges Required LOW Subsequent Confidentiality NONE Subsequent Integrity NONE Subsequent Availability NONE Published 2026-10-14 Updated 2026-10-14 Discovered externally Description A local privilege escalation vulnerability in the Palo Alto Networks GlobalProtect™ app enables a local user to escalate their privileges to root on macOS. This enables a non-administrative user to execute arbitrary commands with administrative privileges. The GlobalProtect app on Linux, Windows, iOS, Android and Chrome OS is not affected by this vulnerability. Product Status Versions Affected Unaffected GlobalProtect App None on Linux None on Windows None on iOS None on Android None on ChromeOS All on Linux All on Windows All on iOS All on Android All on ChromeOS GlobalProtect App 6.3 < 6.3.3-h16 (6.3.3-1199) on macOS >= 6.3.3-h16 (6.3.3-1199) on macOS GlobalProtect App 6.2 < 6.2.8-h15 (6.2.8-1084) on macOS >= 6.2.8-h15 (6.2.8-1084) on macOS Required Configuration for Exposure No special configuration is required to be affected by this issue. Severity: MEDIUM, Suggested Urgency: MODERATE CVSS-BT: 5.9 / CVSS-B: 8.5 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber) Exploitation Status Palo Alto Networks is not aware of any malicious exploitation of this issue. Weakness Type and Impact CWE-426 Untrusted Search Path CAPEC-233 Privilege Escalation Solution Version Minor Version Suggested Solution GlobalProtect App 6.3 on macOS 6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later. GlobalProtect App 6.2 on macOS 6.2.0 through 6.2.8-h14 Upgrade to 6.2.8-h15 (6.2.8-1084) or later. GlobalProtect App on Linux No action needed. GlobalProtect App on Windows No action needed. GlobalProtect App on iOS No action needed. GlobalProtect App on Android No action needed. GlobalProtect App on ChromeOS No action needed. Workarounds and Mitigations No known workarounds exist for this issue. Acknowledgments Palo Alto Networks thanks Ronen Seleri and Shahaf Pruss of Blyde Labs, Christopher Ellis of Workday, and James Otten (internal reporter) for discovering and reporting this issue. CPEs cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:macOS:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:macOS:*:* Show More CPE Applicability cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:* is vulnerable from (including)6.2.8 and up to (excluding)6.2.8-h15 ORcpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:macOS:*:* is vulnerable from (including)6.3.3 and up to (excluding)6.3.3-h16 Timeline 2026-10-14 Initial Publication. _____________________________________________________________________ CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows Urgency MODERATE Severity 4.3 · MEDIUM Exploit Maturity UNREPORTED Response Effort MODERATE Recovery USER Value Density DIFFUSE Attack Vector LOCAL Attack Complexity LOW Attack Requirements NONE Automatable NO User Interaction NONE Product Confidentiality NONE Product Integrity NONE Product Availability HIGH Privileges Required LOW Subsequent Confidentiality NONE Subsequent Integrity NONE Subsequent Availability NONE Published 2026-10-14 Updated 2026-10-14 Discovered externally Description A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability. Product Status Versions Affected Unaffected GlobalProtect App None on Linux None on macOS None on iOS None on Android None on Chrome OS All on Linux All on macOS All on iOS All on Android All on Chrome OS GlobalProtect App 6.3 < 6.3.3-h16 (6.3.3-1199) on Windows >= 6.3.3-h16 (6.3.3-1199) on Windows GlobalProtect App 6.2 < 6.2.8-h15 (6.2.8-1084) on Windows >= 6.2.8-h15 (6.2.8-1084) on Windows GlobalProtect App 6.0 < 6.0.15 on Windows >= 6.0.15 on Windows Required Configuration for Exposure No special configuration is required to be affected by this issue. Severity: MEDIUM, Suggested Urgency: MODERATE CVSS-BT: 4.3 / CVSS-B: 6.8 (CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber) Exploitation Status Palo Alto Networks is not aware of any malicious exploitation of this issue. Weakness Type and Impact CWE-843 Access of Resource Using Incompatible Type ('Type Confusion') CAPEC-153 Input Data Manipulation Solution Version Minor Version Suggested Solution GlobalProtect App 6.3 on Windows 6.3.0 through 6.3.3-h15 Upgrade to 6.3.3-h16 (6.3.3-1199) or later. GlobalProtect App 6.2 on Windows 6.2.0 through 6.2.8-h14 Upgrade to 6.2.8-h15 (6.2.8-1084) or later. GlobalProtect App 6.0 on Windows 6.0.0 through 6.0.14 Upgrade to 6.0.15 or later. GlobalProtect App on Linux No action needed. GlobalProtect App on macOS No action needed. GlobalProtect App on iOS No action needed. GlobalProtect App on Android No action needed. GlobalProtect App on Chrome OS No action needed. All older unsupported GlobalProtect App versions Upgrade to a supported fixed version. Workarounds and Mitigations No known workarounds exist for this issue. Acknowledgments Palo Alto Networks thanks Artemy Tsetsersky and an internal security researcher for discovering and reporting this issue. CPEs cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:* cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:* Show More CPE Applicability cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:* is vulnerable from (including)6.3.3 and up to (excluding)6.3.3-h16 ORcpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:* is vulnerable from (including)6.2.8 and up to (excluding)6.2.8-h15 ORcpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:* is vulnerable from (including)6.0.0 and up to (excluding)6.0.15 Timeline 2026-10-14 Initial Publication. ========================================================= + CERT-RENATER | tel : 01-53-94-20-44 + + 23/25 Rue Daviel | fax : 01-53-94-20-41 + + 75013 Paris | email:cert@support.renater.fr + =========================================================