← Database

CVE-2024-5907

HIGH CVSS: 7.0 Published: 2024-06-12 Modified: 2026-06-17

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Affected Platforms

Paloaltonetworks Cortex Xdr Agent

Weakness Type

CWE-269, NVD-CWE-noinfo

References