CVE-2025-0121CWE-476

Cortex XDR Agent: Local Windows User Can Crash the Agent

Medium · published April 11, 2025

CVSS v4.0
6.8
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/AU:N/R:U/V:D/RE:M/U:Amber
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2025-04-11T01:45Z
EPSS history
Timeline
  • 11 APR 01:45Z
    Cortex XDR Agent: Local Windows User Can Crash the Agent
    cvelistv5