6.8
CVE-2025-0121
- EPSS 0.18%
- Veröffentlicht 11.04.2025 02:15:18
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle psirt@paloaltonetworks.com
- CVE-Watchlists
- Unerledigt
Cortex XDR Agent: Local Windows User Can Crash the Agent
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerPalo Alto Networks
≫
Produkt
Cortex XDR Agent
Default Statusunaffected
Version
8.7.0
Version <
6.3.3
Status
unaffected
Version
8.6.0
Version <
8.6.1
Status
affected
Version
8.5.0
Version <
8.5.2
Status
affected
Version
8.3-CE
Version <
8.3.101-CE HF
Status
affected
Version
7.9-CE
Version <
7.9.103-CE HF
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.393 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| psirt@paloaltonetworks.com | 6.8 | 0 | 0 |
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.