Approved changes feed: RSS · Atom

cpe:2.3:a:paloaltonetworks:cortex_xdr_agent:7.4.1:content_update330:*:*:*:*:*:*

part: a version: 7.4.1 update: content_update330

VendorPaloaltonetworks (3967839f-3a57-5145-af08-e62a2a06ae6a)
ProductCortex Xdr Agent (bf5487ae-f1c5-54a5-9a95-d1817cc1c75c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:npm/%40paloaltonetworks/pan-cortex-xdr purl2cpe 2026-06-01 10:16:50.037163
pkg:sourceforge/cortex-xdr purl2cpe 2026-06-01 10:16:50.037164

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0026 not_vulnerable 2026-06-08 05:39:09.145554 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
MEDIUM (6.7)
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.
Published: 2022-05-11T16:30:25.746Z
Updated: 2024-09-17T01:26:10.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.