CVE-2024-5907

Improper Privilege Management (CWE-269)

Published: Jun 12, 2024 / Updated: 5mo ago

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. CVE-2024-5907 Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability

GlobalProtect app on Windows and macOS < 6.1.3 on Windows and macOS, None on Android and iOS, < 6.1.3 on Linux

The vulnerability allows a local user to escalate privileges. No. This vulnerability can be exploited locally.

https://www.bleepingcomputer.com/news/security/phishing-emails-abuse-windows-search-protocol-to-push-malicious-scripts/ [..] In June 2022, security researchers devised a potent attack chain that also exploited a Microsoft Office flaw to launch searches directly from Word documents.

High Severity Description A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit. Read more at https://www.tenable.com/cve/CVE-2024-5907

However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit. A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges.