CX
Product
Cortex Xdr Agent
by Paloaltonetworks · last CVE Apr 13, 2026
20
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 12Low 0
Watch

Add Cortex Xdr Agent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-0002
7.8
0%
Feb 8
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or…
Affected: 5.0 before 5.0.12.22203; 7.5 through 7.5.101
CVE-2022-0015
7.8
0%
Jan 12
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9
CVE-2021-3042
7.8
0%
Jul 15
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute…
Affected: 6.1; 7.2; 7.2; 7.2; 7.3
CVE-2021-3041
7.8
0%
Jun 10
A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute…
Affected: 5.0 before 5.0.11; 6.1 before 6.1.8; 7.2 before 7.2.3
CVE-2020-2049
7.8
0%
Dec 9
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute…
Affected: 7.1.1 through 7.1.3; 7.2.1 through 7.2.2; 7.1; 7.1; 7.2; 7.2
CVE-2022-0014
7.3
0%
Jan 12
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2
CVE-2022-0012
7.1
0%
Jan 12
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2
CVE-2024-5907
7.0
0%
Jun 12
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges
Affected: 7.9 before 7.9.102; 8.1 before 8.2.3; 8.3 before 8.3.1
CVE-2023-0001
6.7
0%
Feb 8
An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin password for the…
Affected: 7.5 before 7.5.101
CVE-2022-0026
6.7
0%
May 11
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation…
Affected: 6.1; 6.1.4; 6.1.5; 6.1.5; 6.1.6; 6.1.7; +14 more
CVE-2022-0025
6.7
0%
May 11
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation…
Affected: 7.7.0 before 7.7.1.62043
CVE-2024-9469
5.5
0%
Oct 9
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent
Affected: 7.9 before 7.9.102; 8.3.0; 8.4.0
CVE-2024-5909
5.5
0%
Jun 12
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent
Affected: 7.9 before 7.9.102; 8.1 before 8.1.2; 8.2 before 8.2.1
CVE-2023-3280
5.5
0%
Sep 13
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent
Affected: 5.0 through 5.0.12.22203; 7.9.0 before 7.9.3; 7.9.0 before 7.9.101; 8.0.0 before 8.0.2; 7.5.102
CVE-2022-0029
5.5
0%
Sep 14
An improper link resolution vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local attacker to read files on the system with elevated…
Affected: 5.0 before 5.0.12; 7.5 before 7.5.101; 7.7 before 7.7.3
CVE-2022-0013
5.5
0%
Jan 12
A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2
CVE-2020-2020
5.5
0%
Dec 9
An improper handling of exceptional conditions vulnerability in Cortex XDR Agent allows a local authenticated Windows user to create files in the software's internal program…
Affected: 5.0 before 5.0.10; 6.1 before 6.1.7; 7.0 before 7.0.3; 7.1 before 7.1.2
CVE-2026-0232
4.4
0%
Apr 13
Cortex XDR Agent: Local Administrator can disable the agent on Windows
Affected: 8.7.0 before 8.7.101; 7.9; 8.3; 8.9.0; 9.0.0
CVE-2024-8690
4.4
0%
Sep 11
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows administrator privileges to disable the agent
Affected: 7.9.102
CVE-2024-5905
4.4
0%
Jun 12
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the…
Affected: 7.9.0 before 7.9.102; 8.1 before 8.1.2; 8.2 before 8.2.1
Showing 20