CX
Product
Cortex XDR Agent
22
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 14Low 0
Watch
Add Cortex XDR Agent to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0002 | 7.8 | Feb 8 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or… Affected: 5.0 before 5.0.12.22203; 7.5 through 7.5.101 |
| CVE-2022-0015 | 7.8 | Jan 12 | A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated… Affected: 5.0 before 5.0.12; 6.1 before 6.1.9 |
| CVE-2021-3042 | 7.8 | Jul 15 | A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute… Affected: 6.1; 7.2; 7.2; 7.2; 7.3 |
| CVE-2021-3041 | 7.8 | Jun 10 | A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute… Affected: 5.0 before 5.0.11; 6.1 before 6.1.8; 7.2 before 7.2.3 |
| CVE-2020-2049 | 7.8 | Dec 9 | A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute… Affected: 7.1.1 through 7.1.3; 7.2.1 through 7.2.2; 7.1; 7.1; 7.2; 7.2 |
| CVE-2022-0014 | 7.3 | Jan 12 | An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory… Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2 |
| CVE-2022-0012 | 7.1 | Jan 12 | An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary… Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2 |
| CVE-2024-5907 | 7.0 | Jun 12 | Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability Affected: 7.9 before 7.9.102; 8.1 before 8.2.3; 8.3 before 8.3.1 |
| CVE-2025-0121 | 6.8 | Apr 11 | Cortex XDR Agent: Local Windows User Can Crash the Agent Affected: 8.6.0 before 8.6.1; 8.5.0 before 8.5.2; 8.3-CE before 8.3.101-CE HF; 7.9-CE before 7.9.103-CE HF |
| CVE-2025-0112 | 6.8 | Feb 19 | Cortex XDR Agent: Local Windows User Can Disable the Agent Affected: 8.3-CE before 8.3.101-CE; 8.4.0; 8.5.0 before 8.5.1 |
| CVE-2023-0001 | 6.7 | Feb 8 | An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the… Affected: 7.5 before 7.5.101 |
| CVE-2022-0026 | 6.7 | May 11 | A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation… Affected: 6.1; 6.1.4; 6.1.5; 6.1.5; 6.1.6; 6.1.7; +14 more |
| CVE-2022-0025 | 6.7 | May 11 | A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation… Affected: 7.7.0 before 7.7.1.62043 |
| CVE-2024-9469 | 5.5 | Oct 9 | Cortex XDR Agent: Local Windows User Can Disable the Agent Affected: 7.9 before 7.9.102-CE; 8.3 before 8.3.1; 8.4 before 8.4.1 |
| CVE-2024-5909 | 5.5 | Jun 12 | Cortex XDR Agent: Local Windows User Can Disable the Agent Affected: 7.9 before 7.9.102; 8.1 before 8.1.2; 8.2 before 8.2.1 |
| CVE-2023-3280 | 5.5 | Sep 13 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent Affected: 5.0 through 5.0.12.22203; 7.9.0 before 7.9.3; 7.9.0 before 7.9.101; 8.0.0 before 8.0.2; 7.5.102 |
| CVE-2022-0029 | 5.5 | Sep 14 | An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated… Affected: 5.0 before 5.0.12; 7.5 before 7.5.101; 7.7 before 7.7.3 |
| CVE-2022-0013 | 5.5 | Jan 12 | A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system… Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2 |
| CVE-2020-2020 | 5.5 | Dec 9 | An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program… Affected: 5.0 before 5.0.10; 6.1 before 6.1.7; 7.0 before 7.0.3; 7.1 before 7.1.2 |
| CVE-2026-0232 | 4.4 | Apr 13 | Cortex XDR Agent: Local Administrator can disable the agent on Windows Affected: 8.7.0 before 8.7.101; 7.9; 8.3; 8.9.0; 9.0.0 |
| CVE-2024-8690 | 4.4 | Sep 11 | Cortex XDR Agent: Local Windows Administrator Can Disable the Agent Affected: 7.9.102 |
| CVE-2024-5905 | 4.4 | Jun 12 | Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent Affected: 7.9.0 before 7.9.102; 8.1 before 8.1.2; 8.2 before 8.2.1 |
Showing 22