CVE-2024-5907

HighCVSS 7.0/10Last modified Nov 3, 2026

Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Metrics

CVSS 3.1 7.0/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
Palo Alto Networks	Cortex XDR Agent	>= 7.9-CE, < 7.9.102-CE; 8.1.0; >= 8.2.0, < 8.2.3; >= 8.3.0, < 8.3.1

References

https://security.paloaltonetworks.com/CVE-2024-5907Vendor Advisory
https://security.paloaltonetworks.com/CVE-2024-5907Vendor Advisory

Timeline

Published: Jun 12, 2024
Last modified: Nov 3, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-59087.5A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalP CVE-2024-59095.5A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows us CVE-2024-59109.8Missing authentication for a critical function in Palo Alto Networks Expedition can lead to an Expedition admin account takeover for attacke CVE-2024-59114.9An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access CVE-2024-59126.8An improper file signature check in Palo Alto Networks Cortex XDR agent may allow an attacker to bypass the Cortex XDR agent's executable bl CVE-2024-59136.8An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the phy CVE-2024-59149.8A command injection issue in Palo Alto Networks Cortex XSOAR CommonScripts Pack allows an unauthenticated attacker to execute arbitrary comm CVE-2024-59157.8A privilege escalation (PE) vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute pro CVE-2024-59164.4An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose CVE-2024-59174.9A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative CVE-2024-59184.3An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted c CVE-2024-59196.5A blind XML External Entities (XXE) injection vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker to e