CVE-2026-0314

Awaiting Analysis Awaiting Analysis - Queue

Type Confusion Flaw in Palo Alto GlobalProtect Windows App Causes DoS

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: Palo Alto Networks, Inc.

Description

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-0314

Affected Vendors & Products

Vendor	Product	Version / Range
Palo	Alto	Networks GlobalProtect App 6.3.0
Palo	Alto	Networks GlobalProtect App 6.2.0
Palo	Alto	Networks GlobalProtect App 6.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-843	The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Attack-Flow Graph

Executive Summary

This is a type confusion vulnerability in Palo Alto Networks GlobalProtect app for Windows. It allows a local user with low privileges to trigger a denial of service condition by exploiting the flaw.

Detection Guidance

This vulnerability is specific to the Palo Alto Networks GlobalProtect app on Windows and causes a DoS condition. Detection may involve checking for crashes or unusual behavior in the GlobalProtect app. No specific commands are provided in the given context to detect this issue.

Impact Analysis

The vulnerability can cause the GlobalProtect app on Windows to crash or become unresponsive, disrupting network connectivity for the affected user.

Compliance Impact

This vulnerability causes a denial of service (DoS) condition but does not appear to directly impact data confidentiality or integrity. Compliance with standards like GDPR or HIPAA typically focuses on unauthorized data access or breaches, which this issue does not involve. The DoS condition may disrupt operations but is unlikely to violate these regulations on its own.

Mitigation Strategies

Update the Palo Alto Networks GlobalProtect app on Windows to the latest version to address the type confusion vulnerability that could cause a denial of service.

Hi! I’m here to help you understand CVE-2026-0314. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70