Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:cortex_xdr_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductCortex Xdr Agent (d99002a3-7c90-5f40-93f6-4fd42b14be58)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0232 not_vulnerable 2026-06-08 07:47:11.159413 Cortex XDR Agent: Local Administrator can disable the agent on Windows
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
Published: 2026-04-13T07:22:48.325Z
Updated: 2026-04-13T13:27:43.511Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8690 not_vulnerable 2026-06-08 07:00:25.404159 Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Published: 2024-09-11T16:42:39.974Z
Updated: 2024-09-11T18:24:05.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5912 not_vulnerable 2026-06-08 06:56:17.753653 Cortex XDR Agent: Improper File Signature Verification Checks
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.
Published: 2024-07-10T18:40:16.240Z
Updated: 2024-08-01T21:25:03.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5909 not_vulnerable 2026-06-08 06:56:17.744873 Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Published: 2024-06-12T16:29:23.822Z
Updated: 2024-08-01T21:25:03.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5907 vulnerable 2026-06-08 06:56:17.735825 Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2024-06-12T16:26:39.742Z
Updated: 2024-08-01T21:25:03.047Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5905 vulnerable 2026-06-08 06:56:17.723127 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3280 vulnerable 2026-06-08 06:09:39.055582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0002 not_vulnerable 2026-06-08 05:52:03.852291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0001 not_vulnerable 2026-06-08 05:52:03.850564 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0029 not_vulnerable 2026-06-08 05:39:09.183946 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0029 vulnerable 2026-06-08 05:39:09.183789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0026 vulnerable 2026-06-08 05:39:09.131723 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0025 not_vulnerable 2026-06-08 05:39:09.130921 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0025 vulnerable 2026-06-08 05:39:09.130808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0015 not_vulnerable 2026-06-08 05:39:09.102986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0014 not_vulnerable 2026-06-08 05:39:09.102359 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0013 not_vulnerable 2026-06-08 05:39:09.101378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0012 not_vulnerable 2026-06-08 05:39:09.098525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3042 vulnerable 2026-06-08 05:33:50.730240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3042 not_vulnerable 2026-06-08 05:33:50.730196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3041 vulnerable 2026-06-08 05:33:50.728853 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2049 not_vulnerable 2026-06-08 05:24:58.780670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2020 vulnerable 2026-06-08 05:24:58.749059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.