{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-0314","assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","state":"PUBLISHED","assignerShortName":"palo_alto","dateReserved":"2025-11-03T20:45:12.840Z","datePublished":"2026-10-14T20:25:32.075Z","dateUpdated":"2026-10-15T18:41:54.691Z"},"containers":{"cna":{"providerMetadata":{"orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","shortName":"palo_alto","dateUpdated":"2026-10-14T20:25:32.075Z"},"title":"GlobalProtect App: Local Denial of Service (DoS) on Windows","datePublic":"2026-10-14T16:00:00.000Z","problemTypes":[{"descriptions":[{"lang":"en","cweId":"CWE-843","description":"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')","type":"CWE"}]}],"impacts":[{"capecId":"CAPEC-153","descriptions":[{"lang":"en","value":"CAPEC-153 Input Data Manipulation"}]}],"affected":[{"vendor":"Palo Alto Networks","product":"GlobalProtect App","versions":[{"status":"affected","version":"6.3.0","lessThan":"6.3.3-h16","changes":[{"at":"6.3.3-h16","status":"unaffected"}],"versionType":"custom"},{"status":"affected","version":"6.2.0","lessThan":"6.2.8-h15","changes":[{"at":"6.2.8-h15","status":"unaffected"}],"versionType":"custom"},{"status":"affected","version":"6.0.0","lessThan":"6.0.15","changes":[{"at":"6.0.15","status":"unaffected"}],"versionType":"custom"}],"defaultStatus":"unaffected","platforms":["Windows"],"cpes":["cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.3:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.2:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.1:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.3.0:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.8:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.7:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.6:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.4:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.3:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.2:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.1:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.2.0:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.14:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.13:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.12:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.11:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.10:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.8:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.7:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.6:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.5:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.4:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.3:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.2:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.1:*:*:*:*:Windows:*:*","cpe:2.3:a:palo_alto_networks:globalprotect_app:6.0.0:*:*:*:*:Windows:*:*"]},{"vendor":"Palo Alto Networks","product":"GlobalProtect App","versions":[{"status":"unaffected","version":"All","lessThan":"12.2.4","changes":[{"at":"12.2.4","status":"unaffected"}],"versionType":"custom"}],"defaultStatus":"unaffected","platforms":["Linux","macOS","iOS","Android","Chrome OS"]}],"cpeApplicability":[{"operator":"OR","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*","versionStartIncluding":"6.3.3","versionEndExcluding":"6.3.3-h16"},{"vulnerable":true,"criteria":"cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*","versionStartIncluding":"6.2.8","versionEndExcluding":"6.2.8-h15"},{"vulnerable":true,"criteria":"cpe:2.3:a:palo_alto_networks:globalprotect_app:*:*:*:*:*:Windows:*:*","versionStartIncluding":"6.0.0","versionEndExcluding":"6.0.15"}]}]}],"descriptions":[{"lang":"en","value":"A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.\n\nThe GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.","supportingMedia":[{"type":"text/html","base64":false,"value":"<span>A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.</span><br><br><span>The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.</span>"}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2026-0314","name":"PAN-OS Security Advisory","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"HIGH","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","Safety":"NOT_DEFINED","Automatable":"NO","Recovery":"USER","valueDensity":"DIFFUSE","vulnerabilityResponseEffort":"MODERATE","providerUrgency":"AMBER","version":"4.0","baseSeverity":"MEDIUM","baseScore":4.3,"vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber"}}],"configurations":[{"lang":"eng","value":"No special configuration is required to be affected by this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"<span>No special configuration is required to be affected by this issue.</span>"}]}],"workarounds":[{"lang":"eng","value":"No known workarounds exist for this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"No known workarounds exist for this issue."}]}],"solutions":[{"lang":"eng","value":"VersionMinor VersionSuggested SolutionGlobalProtect App 6.3 on Windows6.3.0 through 6.3.3-h15\nUpgrade to 6.3.3-h16 (6.3.3-1199) or later.GlobalProtect App 6.2 on Windows6.2.0 through 6.2.8-h14Upgrade to 6.2.8-h15 (6.2.8-1084) or later.GlobalProtect App 6.0 on Windows6.0.0 through 6.0.14Upgrade to 6.0.15 or later. GlobalProtect App on Linux No action needed.GlobalProtect App on macOS No action needed.GlobalProtect App on iOS No action needed.GlobalProtect App on Android No action needed.GlobalProtect App on Chrome OS No action needed.All older unsupported GlobalProtect App versions Upgrade to a supported fixed version.","supportingMedia":[{"type":"text/html","base64":false,"value":"<table><thead><tr><th>Version</th><th>Minor Version</th><th>Suggested Solution</th></tr></thead><tbody><tr><td>GlobalProtect App 6.3 on Windows</td><td>6.3.0 through 6.3.3-h15<br></td><td>Upgrade to 6.3.3-h16 (6.3.3-1199) or later.</td></tr><tr><td>GlobalProtect App 6.2 on Windows</td><td>6.2.0 through 6.2.8-h14</td><td>Upgrade to&nbsp;6.2.8-h15 (6.2.8-1084) or later.</td></tr><tr><td>GlobalProtect App 6.0 on Window<b>s</b></td><td>6.0.0 through 6.0.14</td><td>Upgrade to 6.0.15 or later.&nbsp;</td></tr><tr><td>GlobalProtect App on Linux</td><td>&nbsp;</td><td>No action needed.</td></tr><tr><td>GlobalProtect App on macOS</td><td>&nbsp;</td><td>No action needed.</td></tr><tr><td>GlobalProtect App on iOS</td><td>&nbsp;</td><td>No action needed.</td></tr><tr><td>GlobalProtect App on Android</td><td>&nbsp;</td><td>No action needed.</td></tr><tr><td>GlobalProtect App on Chrome OS</td><td>&nbsp;</td><td>No action needed.</td></tr><tr><td>All older unsupported GlobalProtect App versions</td><td>&nbsp;</td><td>Upgrade to a supported fixed version.</td></tr></tbody></table>"}]}],"exploits":[{"lang":"en","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue.","supportingMedia":[{"type":"text/html","base64":false,"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}]}],"timeline":[{"time":"2026-10-14T16:00:00.000Z","lang":"en","value":"Initial Publication."}],"credits":[{"lang":"en","value":"Artemy Tsetsersky","type":"finder"},{"lang":"en","value":"an internal security researcher","type":"finder"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"},"x_affectedList":["GlobalProtect App 6.3.3","GlobalProtect App 6.3.2","GlobalProtect App 6.3.1","GlobalProtect App 6.3.0","GlobalProtect App 6.3","GlobalProtect App 6.2.8","GlobalProtect App 6.2.7","GlobalProtect App 6.2.6","GlobalProtect App 6.2.4","GlobalProtect App 6.2.3","GlobalProtect App 6.2.2","GlobalProtect App 6.2.1","GlobalProtect App 6.2.0","GlobalProtect App 6.2","GlobalProtect App 6.0.14","GlobalProtect App 6.0.13","GlobalProtect App 6.0.12","GlobalProtect App 6.0.11","GlobalProtect App 6.0.10","GlobalProtect App 6.0.8","GlobalProtect App 6.0.7","GlobalProtect App 6.0.6","GlobalProtect App 6.0.5","GlobalProtect App 6.0.4","GlobalProtect App 6.0.3","GlobalProtect App 6.0.2","GlobalProtect App 6.0.1","GlobalProtect App 6.0.0","GlobalProtect App 6.0"]},"adp":[{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-15T18:41:42.318399Z","id":"CVE-2026-0314","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-15T18:41:54.691Z"}}]}}