VULNERABILITY INTELLIGENCE
CVE-2025-0117
EPSS probability0.16%
CISA KEVNot currently listed
Published2025-03-12
Last modified2026-06-17
Description
A reliance on untrusted input for a security decision in the GlobalProtect app on Windows devices potentially enables a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. GlobalProtect App on macOS, Linux, iOS, Android, Chrome OS and GlobalProtect UWP App are not affected.
Weakness classification
- psirt@paloaltonetworks.com: CWE-807