CVE-2025-0120CWE-250

GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

High · published April 11, 2025

CVSS v4.0
7.1
EPSS
0%
Percentile
4.9
In the wild
Unconfirmed
What it is

A vulnerability with a privilege management mechanism in the Palo Alto Networks GlobalProtect™ app on Windows devices allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY\SYSTEM. However, execution requires that the local user can also successfully exploit a race condition, which makes this vulnerability difficult to exploit.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:H/AU:N/R:U/V:C/RE:M/U:Amber
EPSS
0.00161 · 4.9th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2025-04-11T01:44Z
EPSS history
Timeline
  • 11 APR 01:44Z
    GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
    cvelistv5