CVE-2026-66151

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

PT-2026-69138

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN Client versions prior to 4.10.8.1109 Description An out-of-bounds kernel memory read exists in the SWIPsec.sys driver. This flaw allows a local attacker to trigger a system crash. Recommendations Update SonicWall Global VP...

CVE-2026-66151: Out-of-bounds Read

SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which could allow a local attacker to cause a system crash...

EUVD-2007-6241

Malware in sbrugna...

EUVD-2021-7500

Malicious code in bioql PyPI...

PT-2022-9166

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN Client versions 4.10.7.1117 and earlier Description The issue is related to a DLL Search Order Hijacking vulnerability in one of the installer components. This could allow a local attacker to execute commands on the target...

CVE-2021-20051: Uncontrolled Search Path Element

SonicWall Global VPN Client 4.10.7.1117 installer 32-bit and 64-bit and earlier versions have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system...

SonicWall Global VPN Client DLL Search Order Hijacking via Application Installer

SonicWall Global VPN Client 4.10.7 installer 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability in one of the installer components. Successful exploitation via a local attacker could result in command execution in the target system. CVE: CVE-2021-20051 Last updated: Apr...

PT-2021-7052

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN client versions 4.10.6 and earlier Description The issue is related to a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...

CVE-2021-20047: Uncontrolled Search Path Element

SonicWall Global VPN client version 4.10.6 32-bit and 64-bit and earlier have a DLL Search Order Hijacking vulnerability. Successful exploitation via a local attacker could result in remote code execution in the target system...

PT-2021-13734

Name of the Vulnerable Software and Affected Versions: SonicWall Global VPN Client versions 4.10.5 and earlier Description: The issue is related to incorrect default file permission in the SonicWall Global VPN Client installer, which can lead to privilege escalation and potentially allow command...

CVE-2021-20037: Incorrect Default Permissions

SonicWall Global VPN Client 4.10.5 installer 32-bit and 64-bit incorrect default file permission vulnerability leads to privilege escalation which potentially allows command execution in the host operating system. This vulnerability impacts GVC 4.10.5 installer and earlier...

PT-2020-18283

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN client version 4.10.4.0314 and earlier Description The issue allows an unprivileged Windows user to elevate privileges to SYSTEM through a loaded process hijacking vulnerability. Recommendations For SonicWall Global VPN...

PT-2020-18284

Name of the Vulnerable Software and Affected Versions SonicWall Global VPN client versions 4.10.4.0314 and earlier Description The issue is related to an insecure library loading, also known as DLL hijacking, which could lead to remote code execution in the target system if successfully exploited...

CVE-2020-5144: Untrusted Search Path

SonicWall Global VPN client version 4.10.4.0314 and earlier allows unprivileged windows user to elevate privileges to SYSTEM through loaded process hijacking vulnerability...

CVE-2020-5145: Uncontrolled Search Path Element

SonicWall Global VPN client version 4.10.4.0314 and earlier have an insecure library loading DLL hijacking vulnerability. Successful exploitation could lead to remote code execution in the target system...

SEC Consult SA-20090525-3 :: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability

SEC Consult Security Advisory 20090525-3 ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other...

SonicOS Format String

SEC Consult Security Advisory ========================================================================== title: SonicOS Format String Vulnerability program: SonicWALL Global VPN Client vulnerable version: PRO 4100 SonicOS 4.0.0.2-51e Standard and Enhanced possibly other versions homepage:...

SonicWALL Global VPN Client Privilege Escalation

SEC Consult Security Advisory ========================================================================== title: SonicWALL Global VPN Client Local Privilege Escalation Vulnerability program: SonicWALL Global VPN Client vulnerable version: Global VPN Client = 4.0.0.835 possibly other versions...

SonicWALL Global VPN Client 4.0 - Log File Remote Format String

source: https://www.securityfocus.com/bid/35093/info SonicWALL Global VPN Client is prone to a remote format-string vulnerability because it fails to properly sanitize user-supplied input before passing it as the format specifier to a formatted-printing function. Successfully exploiting this issu...