Description
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | Cortex XDR Agent | 8.6.0 – < 8.6.1, 8.5.0 – < 8.5.2, 8.3-CE – < 8.3.101-CE HF, 7.9-CE – < 7.9.103-CE HF | 8.6.1 |
References
- https://security.paloaltonetworks.com/CVE-2025-0121 vendor-advisory