CVE-2025-0121Medium

CVE-2025-0121 Cortex XDR Agent: Local Windows User Can Crash the Agent

Published
April 9, 2025
Last Modified
April 9, 2025

🔗 CVE IDs covered (1)

CVE-2025-0121 →

📋 Description

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.

🎯 Affected products1

  • Cortex XDR Agent

✅ Remediation

This issue is fixed in Cortex XDR Agent 8.6.1, Cortex XDR Agent 8.5.2, Cortex XDR Agent 8.3.101-CE HF, Cortex XDR Agent 7.9.103-CE HF, and all later Cortex XDR Agent versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)