What’s Vulnerable › Products
Palo Alto Networks Cortex XDR Agent vulnerabilities
24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your Palo Alto Networks Cortex XDR Agent version is affected
Latest Palo Alto Networks Cortex XDR Agent vulnerabilities
- CVE-2026-0232 — Cortex XDR Agent: Local Administrator can disable the agent on Windows (CVSS 4.4)
- CVE-2026-0230 — Cortex XDR Agent: Local Administrator can disable the agent on macOS (CVSS 4.0)
- CVE-2025-0121 — Cortex XDR Agent: Local Windows User Can Crash the Agent (CVSS 6.8)
- CVE-2025-0112 — Cortex XDR Agent: Local Windows User Can Disable the Agent (CVSS 6.8)
- CVE-2024-9469 — Cortex XDR Agent: Local Windows User Can Disable the Agent (CVSS 5.5)
- CVE-2024-8690 — Cortex XDR Agent: Local Windows Administrator Can Disable the Agent (CVSS 4.4)
- CVE-2024-5912 — Cortex XDR Agent: Improper File Signature Verification Checks (CVSS 6.8)
- CVE-2024-5909 — Cortex XDR Agent: Local Windows User Can Disable the Agent (CVSS 5.5)
- CVE-2024-5907 — Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability (CVSS 7.0)
- CVE-2024-5905 — Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent (CVSS 4.4)
- CVE-2023-3280 — Cortex XDR Agent: Local Windows User Can Disable the Agent (CVSS 5.5)
- CVE-2023-0002 — Cortex XDR Agent: Product Disruption by Local Windows User (CVSS 7.8)
- CVE-2023-0001 — Cortex XDR Agent: Cleartext Exposure of Agent Admin Password (CVSS 6.7)
- CVE-2022-0029 — Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File (CVSS 5.5)
- CVE-2022-0026 — Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability (CVSS 6.7)
- CVE-2022-0025 — Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability (CVSS 6.7)
- CVE-2022-0015 — Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability (CVSS 7.8)
- CVE-2022-0014 — Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session (CVSS 7.3)
- CVE-2022-0013 — Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File (CVSS 5.5)
- CVE-2022-0012 — Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability (CVSS 7.1)
- CVE-2021-3042 — Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation (CVSS 7.2)
- CVE-2021-3041 — Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation (CVSS 7.2)
- CVE-2020-2049 — Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation (CVSS 7.2)
- CVE-2020-2020 — Cortex XDR Agent: Exceptional condition denial-of-service (DoS) (CVSS 2.1)