← CVE Intelligence

CVE-2024-5907

Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability PUBLISHED

Description (CNA)

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentaffected 7.9-CE before 7.9.102-CE; affected 8.1.0; affected 8.2.0 before 8.2.3; affected 8.3.0 before 8.3.1; unaffected 8.4.0

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.