← CVE Intelligence

CVE-2025-0121

Cortex XDR Agent: Local Windows User Can Crash the Agent PUBLISHED

Description (CNA)

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / Cortex XDR Agentunaffected 8.7.0 before 6.3.3; affected 8.6.0 before 8.6.1; affected 8.5.0 before 8.5.2; affected 8.3-CE before 8.3.101-CE HF; affected 7.9-CE before 7.9.103-CE HF

CWE

CWE-476

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.