Unrated severityNVD Advisory· Published May 11, 2022· Updated Sep 17, 2024
Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability
CVE-2022-0026
Description
A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:\) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<content update 330+ 1 more
- (no CPE)range: <content update 330
- (no CPE)range: 7.7.* without CU-330
Patches
Vulnerability mechanics
References
1- security.paloaltonetworks.com/CVE-2022-0026mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.