vulnerability

Palo Alto Networks GlobalProtect App: CVE-2020-2032: File race condition vulnerability leads to local privilege escalation during upgrade

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
7	(AV:L/AC:M/Au:N/C:C/I:C/A:C)	Jun 10, 2020	May 21, 2025	Jul 3, 2025

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Jun 10, 2020

Added

May 21, 2025

Modified

Jul 3, 2025

Description

A race condition vulnerability Palo Alto Networks GlobalProtect app on Windows allows a local limited Windows user to execute programs with SYSTEM privileges.
This issue can be exploited only while performing a GlobalProtect app upgrade.

Solution

palo-alto-networks-globalprotect-app-upgrade-latest

References

CWE-367
CVE-2020-2032
https://attackerkb.com/topics/CVE-2020-2032
URL-https://security.paloaltonetworks.com/json/CVE-2020-2032

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today