Cortex Xdr Agent
Approved changes feed: RSS · Atom
cpe:2.3:a:palo_alto_networks:cortex_xdr_agent:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Palo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d) |
|---|---|
| Product | Cortex Xdr Agent (d99002a3-7c90-5f40-93f6-4fd42b14be58) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0232 |
not_vulnerable | 2026-06-08 07:47:11.159413 |
Cortex XDR Agent: Local Administrator can disable the agent on Windows
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows administrator to disable the agent. This issue may be leveraged by malware to perform malicious activity without detection.
Published: 2026-04-13T07:22:48.325Z
Updated: 2026-04-13T13:27:43.511Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8690 |
not_vulnerable | 2026-06-08 07:00:25.404159 |
Cortex XDR Agent: Local Windows Administrator Can Disable the Agent
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Published: 2024-09-11T16:42:39.974Z
Updated: 2024-09-11T18:24:05.107Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5912 |
not_vulnerable | 2026-06-08 06:56:17.753653 |
Cortex XDR Agent: Improper File Signature Verification Checks
An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable blocking capabilities and run untrusted executables on the device. This issue can be leveraged to execute untrusted software without being detected or blocked.
Published: 2024-07-10T18:40:16.240Z
Updated: 2024-08-01T21:25:03.178Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5909 |
not_vulnerable | 2026-06-08 06:56:17.744873 |
Cortex XDR Agent: Local Windows User Can Disable the Agent
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.
Published: 2024-06-12T16:29:23.822Z
Updated: 2024-08-01T21:25:03.192Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5907 |
vulnerable | 2026-06-08 06:56:17.735825 |
Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.
Published: 2024-06-12T16:26:39.742Z
Updated: 2024-08-01T21:25:03.047Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5905 |
vulnerable | 2026-06-08 06:56:17.723127 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3280 |
vulnerable | 2026-06-08 06:09:39.055582 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0002 |
not_vulnerable | 2026-06-08 05:52:03.852291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0001 |
not_vulnerable | 2026-06-08 05:52:03.850564 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0029 |
not_vulnerable | 2026-06-08 05:39:09.183946 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0029 |
vulnerable | 2026-06-08 05:39:09.183789 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0026 |
vulnerable | 2026-06-08 05:39:09.131723 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0025 |
not_vulnerable | 2026-06-08 05:39:09.130921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0025 |
vulnerable | 2026-06-08 05:39:09.130808 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0015 |
not_vulnerable | 2026-06-08 05:39:09.102986 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0014 |
not_vulnerable | 2026-06-08 05:39:09.102359 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0013 |
not_vulnerable | 2026-06-08 05:39:09.101378 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-0012 |
not_vulnerable | 2026-06-08 05:39:09.098525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3042 |
vulnerable | 2026-06-08 05:33:50.730240 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3042 |
not_vulnerable | 2026-06-08 05:33:50.730196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3041 |
vulnerable | 2026-06-08 05:33:50.728853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2049 |
not_vulnerable | 2026-06-08 05:24:58.780670 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2020 |
vulnerable | 2026-06-08 05:24:58.749059 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.