CVE-2024-5907

June 12, 2024, 5:15 p.m.

None
No Score

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Product(s) Impacted

Product Versions
Palo Alto Networks Cortex XDR agent
  • []

Weaknesses

Common security weaknesses mapped to this vulnerability.

Timeline

Published: June 12, 2024, 5:15 p.m.
Last Modified: June 12, 2024, 5:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

psirt@paloaltonetworks.com

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.