CVE-2025-0121 — Cortex XDR Agent: Local Windows User Can Crash the Agent
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additional…
Published: 2025-04-11 · CVSS: 6.8 · CVSS 4.0
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7