CVE-2024-5907

June 12, 2024, 5:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Palo Alto Networks Cortex XDR agent

Source

psirt@paloaltonetworks.com

Tags

CVE-2024-5907 details

Published : June 12, 2024, 5:15 p.m.
Last Modified : June 12, 2024, 5:15 p.m.

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://security.paloaltonetworks.com/CVE-2024-5907 psirt@paloaltonetworks.com
This website uses the NVD API, but is not approved or certified by it.