Description
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Agent | 7.9-CE – < 7.9.102-CE, 8.1.0, 8.2.0 – < 8.2.3, 8.3.0 – < 8.3.1 | 7.9.102-CE |
References
- https://security.paloaltonetworks.com/CVE-2024-5907 vendor-advisory