QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-0120

Back to search

CVE-2025-0120

Published: Apr 11, 2025

Modified: May 2, 2025

PUBLISHED

Description

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.

VendorProductVersions

Palo Alto Networks

GlobalProtect App

affected
6.3.0 - < 6.3.3
affected
6.2.0 - < 6.2.8
affected
6.1.0
affected
6.0.0

Palo Alto Networks

GlobalProtect App

unaffected
All

Palo Alto Networks

GlobalProtect UWP App

unaffected
All

Weaknesses (CWE)

CWE-250

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now