← Database

CVE-2024-9473

HIGH CVSS: 7.8 Published: 2024-10-09 Modified: 2026-06-17

Description

A privilege escalation vulnerability in the Palo Alto Networks GlobalProtect app on Windows allows a locally authenticated non-administrative Windows user to escalate their privileges to NT AUTHORITY/SYSTEM through the use of the repair functionality offered by the .msi file used to install GlobalProtect.

Affected Platforms

Paloaltonetworks Globalprotect

Weakness Type

CWE-250, NVD-CWE-noinfo

References