CVE-2022-0016

7.8 highEPSS 0.2%

High (7.8) in paloaltonetworks globalprotect. EPSS 0.2% chance of exploitation in the next 30 days.

An improper handling of exceptional conditions vulnerability exists within the Connect Before Logon feature of the Palo Alto Networks GlobalProtect app that enables a local attacker to escalate to SYSTEM or root privileges when authenticating with Connect Before Logon under certain circumstances. This issue impacts GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.9 on Windows and MacOS. This issue does not affect the GlobalProtect app on other platforms.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWEs: CWE-755, CWE-703
Published: 2022-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

paloaltonetworks:globalprotect

References

https://security.paloaltonetworks.com/CVE-2022-0016
https://security.paloaltonetworks.com/CVE-2022-0016

Check your stack JSON