Priority LOW 34
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00295 · Published 2023-02-08 · Fixed in 7.9 All, 7.8 All +2 CWE-693
Priority LOW 34
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00236 · Published 2022-01-12 · Fixed in 5.0.12, 6.1.9 CWE-427
Priority LOW 34
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2021-07-15 · Fixed in 5.0 all CWE-427
Priority LOW 34
A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00248 · Published 2021-06-10 · Fixed in 5.0.11, 6.1.8 +1 CWE-427
Priority LOW 34
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00345 · Published 2020-12-09 · No fix listed CWE-427
Priority LOW 32
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can…
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00259 · Published 2022-01-12 · Fixed in 7.2.4, 7.3.2 +2 CWE-426
Priority LOW 31
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integri…
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00251 · Published 2022-01-12 · Fixed in 5.0.12, 7.2.4 +2 CWE-59
Priority LOW 30
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent.
CVSS 4.0MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.0041 · Published 2024-06-12 · Fixed in 8.4.0, 8.3.0 +3 CWE-269
Priority LOW 29
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can then…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00213 · Published 2023-02-08 · Fixed in 7.9 All, 7.8 All +2 CWE-319
Priority LOW 29
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00227 · Published 2022-05-11 · No fix listed CWE-282
Priority LOW 29
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such…
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00244 · Published 2022-05-11 · Fixed in 7.7.1.62043 without CU-500, 7.6 all +5 CWE-427
Priority LOW 25
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent.
CVSS 4.0MEDIUM 5.7· Local · Low privileges · No interaction · EPSS 0.00212 · Published 2024-10-09 · Fixed in 7.9.102-CE, 8.3.1 +4 CWE-754
Priority LOW 25
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges.
CVSS 4.0MEDIUM 5.2· Local · Low privileges · No interaction · EPSS 0.0013 · Published 2024-06-12 · Fixed in 7.9.102-CE, 8.2.3 +2 CWE-269
Priority LOW 25
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00324 · Published 2023-09-13 · Fixed in 7.9.3, 7.9.101-CE +2 CWE-755
Priority LOW 25
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent f…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00307 · Published 2020-12-09 · Fixed in 7.0.3, 7.1.2 +3 CWE-755
Priority LOW 24
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent.
CVSS 4.0MEDIUM 5.6· Local · High privileges · No interaction · EPSS 0.00188 · Published 2024-09-11 · Fixed in 8.5, 8.4 +3 CWE-440
Priority LOW 24
An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00217 · Published 2022-09-14 · Fixed in 7.7.3, 7.5.101-CE +2 CWE-59
Priority LOW 24
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a s…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00227 · Published 2022-01-12 · Fixed in 7.2.4, 5.0.12 +2 CWE-538
Priority LOW 18
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent.
CVSS 4.0MEDIUM 4.0· Local · High privileges · No interaction · EPSS 0.00146 · Published 2026-04-13 · Fixed in 9.1.0, 9.0 +7 CWE-15
Priority LOW 9
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent.
CVSS 4.0LOW 2.0· Local · Low privileges · No interaction · EPSS 0.00089 · Published 2024-06-12 · Fixed in 7.9.102-CE, 8.1.2 +3 CWE-346