Paloaltonetworks
Paloaltonetworks Cortex XDR Agent: vulnerabilidades y CVE
Paloaltonetworks Cortex XDR Agent tiene 21 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE21
Últimos 12 meses1
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-0232 | Media (4) | 0.15% | — | 13 abr 2026 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity… |
| CVE-2024-9469 | Media (5.7) | 0.21% | — | 9 oct 2024 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This issue may be leveraged by malware… |
| CVE-2024-8690 | Media (5.6) | 0.19% | — | 11 sept 2024 | A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to… |
| CVE-2024-5912 | Media (6.8) | 0.13% | — | 10 jul 2024 | An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can… |
| CVE-2024-5909 | Media (6.8) | 0.41% | — | 12 jun 2024 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the… |
| CVE-2024-5907 | Media (5.2) | 0.13% | — | 12 jun 2024 | A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user… |
| CVE-2024-5905 | Baja (2) | 0.09% | — | 12 jun 2024 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to… |
| CVE-2023-3280 | Media (5.5) | 0.32% | — | 13 sept 2023 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent. |
| CVE-2023-0002 | Alta (7.8) | 0.29% | — | 8 feb 2023 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent. |
| CVE-2023-0001 | Media (6.7) | 0.21% | — | 8 feb 2023 | An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the agent in cleartext, which bad actors can… |
| CVE-2022-0029 | Media (5.5) | 0.22% | — | 14 sept 2022 | An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated privileges when generating a tech support file. |
| CVE-2022-0026 | Media (6.7) | 0.23% | — | 11 may 2022 | A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such… |
| CVE-2022-0025 | Media (6.7) | 0.24% | — | 11 may 2022 | A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such… |
| CVE-2022-0015 | Alta (7.8) | 0.23% | — | 12 ene 2022 | A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated privileges. This issue impacts: Cortex XDR… |
| CVE-2022-0014 | Alta (7.3) | 0.25% | — | 12 ene 2022 | An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory (such as C:\) to store a program that can… |
| CVE-2022-0013 | Media (5.5) | 0.22% | — | 12 ene 2022 | A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a… |
| CVE-2022-0012 | Alta (7.1) | 0.24% | — | 12 ene 2022 | An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system… |
| CVE-2021-3042 | Alta (7.8) | 0.25% | — | 15 jul 2021 | A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges.… |
| CVE-2021-3041 | Alta (7.8) | 0.25% | — | 10 jun 2021 | A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. This… |
| CVE-2020-2049 | Alta (7.8) | 0.34% | — | 9 dic 2020 | A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges. This requires… |
| CVE-2020-2020 | Media (5.5) | 0.31% | — | 9 dic 2020 | An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program directory that prevents the Cortex XDR Agent… |