GlobalProtect 6.3.3

[C.Osborn]

Our vulnerability scanner for the last couple weeks has been reporting vulnerabilities for GlobalProtect that are remediated with an upgrade to 6.3.3, but other than the vulnerability acknowledgement from PA mentioning it I do not see any evidence of 6.3.3 being released. The latest version I see in the "Software Updates" section of the customer portal is 6.3.2, and I don't see any release notes or even other mentions of it when googling. Am I missing something, or has this update not yet been released? If so, when can we expect it to be available?

[mshekh]

Hi @C.Osborn ,

Thanks for info, GP 6.3.3 is yet to release and it's expected to release in April 2025.

[J.Suter]

Also waiting for the 6.3.3 release we now have a 3rd known vulnerability, and the solution is to update to 6.3.3 which has yet to appear as an option when clicking Check Now.

Known Vulns fixed by moving to 6.3.3 are: 
CVE-2025-0120 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability
CVE-2025-0117 GlobalProtect App: Local Privilege Escalation (PE) Vulnerability

CVE-2025-0118 GlobalProtect App: Execution of Unsafe ActiveX Control Vulnerability

[LaurenceNG]

Hi All,

Do we have any further info on the release date?

[javier.silva]

Hi There,

I need information about the release date that version 6.3.3

[mshekh]

Hi @J.Suter ,

Tentative release date is 30-April-2025, wait for two more days and check after that.

[LaurenceNG]

Just an update, downloaded 6.3.3 just a minute ago, so it is available now (as long as Palo don't withdraw it!)