CX
Product
Cortex Xdr Agent
by Paloaltonetworks · last CVE Apr 13, 2026
20
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 12Low 0
Watch

Add Cortex Xdr Agent to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-0002
7.8
0%
Feb 8
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or…
Affected: 5.0 before 5.0.12.22203; 7.5 through 7.5.101
CVE-2022-0015
7.8
0%
Jan 12
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables an authenticated local user to execute programs with elevated…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9
CVE-2021-3042
7.8
0%
Jul 15
A local privilege escalation (PE) vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute…
Affected: 6.1; 7.2; 7.2; 7.2; 7.3
CVE-2021-3041
7.8
0%
Jun 10
A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute…
Affected: 5.0 before 5.0.11; 6.1 before 6.1.8; 7.2 before 7.2.3
CVE-2020-2049
7.8
0%
Dec 9
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute…
Affected: 7.1.1 through 7.1.3; 7.2.1 through 7.2.2; 7.1; 7.1; 7.2; 7.2
CVE-2022-0014
7.3
0%
Jan 12
An untrusted search path vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker with file creation privilege in the Windows root directory…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2
CVE-2022-0012
7.1
0%
Jan 12
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary…
Affected: 5.0 before 5.0.12; 6.1 before 6.1.9; 7.2 before 7.2.4; 7.3 before 7.3.2
CVE-2024-5907
7.0
0%
Jun 12
A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges
Affected: 7.9 before 7.9.102; 8.1 before 8.2.3; 8.3 before 8.3.1
Showing 8