CVE-2024-5907
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
35/100
Published: 2024-06-12
Modified: 2026-11-04
First seen: 2026-11-03
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
High
PR:
Low
UI:
None
AT:
None
VC:
None
VI:
Low
VA:
None
Description
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Weakness Classification (1)
Affected Software (14)
| Vendor | Product | Version |
|---|---|---|
| Palo Alto Networks | Cortex XDR Agent | 7.9-CE < 7.9.102-CE |
| Palo Alto Networks | Cortex XDR Agent | 8.1.0 |
| Palo Alto Networks | Cortex XDR Agent | 8.2.0 < 8.2.3 |
| Palo Alto Networks | Cortex XDR Agent | 8.3.0 < 8.3.1 |
| Palo Alto Networks | Cortex XDR Agent | 7.9-CE < 7.9.102-CE |
| Palo Alto Networks | Cortex XDR Agent | 8.1.0 |
| Palo Alto Networks | Cortex XDR Agent | 8.2.0 < 8.2.3 |
| Palo Alto Networks | Cortex XDR Agent | 8.3.0 < 8.3.1 |
| Palo Alto Networks | Cortex XDR Agent | 7.9-CE < 7.9.102-CE |
| Palo Alto Networks | Cortex XDR Agent | 8.1.0 |
| Palo Alto Networks | Cortex XDR Agent | 8.2.0 < 8.2.3 |
| Palo Alto Networks | Cortex XDR Agent | 8.3.0 < 8.3.1 |
| paloaltonetworks | cortex_xdr_agent | 7.9 – 7.9.102 |
| paloaltonetworks | cortex_xdr_agent | 8.1 – 8.2.3 |
References & Advisories (1)
vendor-advisory