# Palo Alto Networks Cortex XDR Agent.

Every CVE that names Palo Alto Networks Cortex XDR Agent among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cortex XDR Agent: Local Administrator can disable the agent on Windows](https://agentprime.io/advisories/CVE-2026-0232.md)
  `CVE-2026-0232` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 4.0 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: CWE-15
- [Cortex XDR Agent: Local Administrator can disable the agent on macOS](https://agentprime.io/advisories/CVE-2026-0230.md)
  `CVE-2026-0230` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 4.0 Medium · Not analysed yet · Published 11 Mar 2026 · Tags: CWE-754
- [Cortex XDR Agent: Local Windows User Can Crash the Agent](https://agentprime.io/advisories/CVE-2025-0121.md)
  `CVE-2025-0121` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.8 Medium · Not analysed yet · Published 11 Apr 2025 · Tags: Memory corruption
- [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2025-0112.md)
  `CVE-2025-0112` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.8 Medium · Not analysed yet · Published 19 Feb 2025 · Tags: CWE-754
- [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2024-9469.md)
  `CVE-2024-9469` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.7 Medium · Not analysed yet · Published 9 Oct 2024 · Tags: CWE-754
- [Cortex XDR Agent: Local Windows Administrator Can Disable the Agent](https://agentprime.io/advisories/CVE-2024-8690.md)
  `CVE-2024-8690` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.6 Medium · Not analysed yet · Published 11 Sept 2024 · Tags: CWE-440
- [Cortex XDR Agent: Improper File Signature Verification Checks](https://agentprime.io/advisories/CVE-2024-5912.md)
  `CVE-2024-5912` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.8 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: Weak cryptography or TLS
- [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2024-5909.md)
  `CVE-2024-5909` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.8 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Privilege escalation
- [Cortex XDR Agent: Local Privilege Escalation (PE) Vulnerability](https://agentprime.io/advisories/CVE-2024-5907.md)
  `CVE-2024-5907` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.2 Medium · Not analysed yet · Published 12 Jun 2024 · Tags: Privilege escalation
- [Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent](https://agentprime.io/advisories/CVE-2024-5905.md)
  `CVE-2024-5905` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 2.0 Low · Not analysed yet · Published 12 Jun 2024 · Tags: CWE-346
- [Cortex XDR Agent: Local Windows User Can Disable the Agent](https://agentprime.io/advisories/CVE-2023-3280.md)
  `CVE-2023-3280` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.5 Medium · Not analysed yet · Published 13 Sept 2023 · Tags: CWE-755
- [Cortex XDR Agent: Product Disruption by Local Windows User](https://agentprime.io/advisories/CVE-2023-0002.md)
  `CVE-2023-0002` · CVE record: Palo Alto Networks Cortex XDR agent · CVSS 5.5 Medium · Not analysed yet · Published 8 Feb 2023 · Tags: CWE-693
- [Cortex XDR Agent: Cleartext Exposure of Agent Admin Password](https://agentprime.io/advisories/CVE-2023-0001.md)
  `CVE-2023-0001` · CVE record: Palo Alto Networks Cortex XDR agent · CVSS 6.0 Medium · Not analysed yet · Published 8 Feb 2023 · Tags: Weak cryptography or TLS
- [Cortex XDR Agent: Improper Link Resolution Vulnerability When Generating a Tech Support File](https://agentprime.io/advisories/CVE-2022-0029.md)
  `CVE-2022-0029` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2022 · Tags: Path traversal
- [Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability](https://agentprime.io/advisories/CVE-2022-0026.md)
  `CVE-2022-0026` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.7 Medium · Not analysed yet · Published 11 May 2022 · Tags: CWE-282
- [Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability](https://agentprime.io/advisories/CVE-2022-0025.md)
  `CVE-2022-0025` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.7 Medium · Not analysed yet · Published 11 May 2022 · Tags: CWE-427
- [Cortex XDR Agent: An Uncontrolled Search Path Element Leads to Local Privilege Escalation (PE) Vulnerability](https://agentprime.io/advisories/CVE-2022-0015.md)
  `CVE-2022-0015` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 7.8 High · Not analysed yet · Published 12 Jan 2022 · Tags: CWE-427
- [Cortex XDR Agent: Unintended Program Execution When Using Live Terminal Session](https://agentprime.io/advisories/CVE-2022-0014.md)
  `CVE-2022-0014` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.7 Medium · Not analysed yet · Published 12 Jan 2022 · Tags: CWE-426
- [Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File](https://agentprime.io/advisories/CVE-2022-0013.md)
  `CVE-2022-0013` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.0 Medium · Not analysed yet · Published 12 Jan 2022 · Tags: Information disclosure
- [Cortex XDR Agent: Local Arbitrary File Deletion Vulnerability](https://agentprime.io/advisories/CVE-2022-0012.md)
  `CVE-2022-0012` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 6.1 Medium · Not analysed yet · Published 12 Jan 2022 · Tags: Path traversal
- [Cortex XDR Agent: Improper Control of User-Controlled File Leads to Local Privilege Escalation](https://agentprime.io/advisories/CVE-2021-3042.md)
  `CVE-2021-3042` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 7.8 High · Not analysed yet · Published 15 Jul 2021 · Tags: CWE-427
- [Cortex XDR Agent: Improper control of user-controlled file leads to local privilege escalation](https://agentprime.io/advisories/CVE-2021-3041.md)
  `CVE-2021-3041` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 7.8 High · Not analysed yet · Published 10 Jun 2021 · Tags: CWE-427
- [Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation](https://agentprime.io/advisories/CVE-2020-2049.md)
  `CVE-2020-2049` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 7.8 High · Not analysed yet · Published 9 Dec 2020 · Tags: CWE-427
- [Cortex XDR Agent: Exceptional condition denial-of-service (DoS)](https://agentprime.io/advisories/CVE-2020-2020.md)
  `CVE-2020-2020` · CVE record: Palo Alto Networks Cortex XDR Agent · CVSS 5.5 Medium · Not analysed yet · Published 9 Dec 2020 · Tags: CWE-755

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=palo-alto-networks-cortex-xdr-agent>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/palo-alto-networks-cortex-xdr-agent/>. Everything for agents: <https://agentprime.io/llms.txt>.