high7.0
CVE-2024-5907
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated …
Impact
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Cortex Xdr Agent | from 7.9 before 7.9.102 from 8.1 before 8.2.3 from 8.3 before 8.3.1 |