6.1
Medium
CVE-2022-0012 An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on…
Description
An improper link resolution before file access vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables a local user to delete arbitrary system files and impact the system integrity or cause a denial of service condition. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.12; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.9; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.4; Cortex XDR agent 7.3 versions earlier than Cortex XDR agent 7.3.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cortex XDR Agent 7.3 | 7.3 → < 7.3.2 | 7.3.2 |
| Cortex XDR Agent 7.2 | 7.2 → < 7.2.4 | 7.2.4 |
| Cortex XDR Agent 6.1 | 6.1 → < 6.1.9 | 6.1.9 |
| Cortex XDR Agent 5.0 | 5.0 → < 5.0.12 | 5.0.12 |
Other CVEs of Cortex XDR Agent
The 24 CVEs of Cortex XDR Agent →
CVE-2026-0232
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows allows a local Windows…
4.0
Medium
CVE-2026-0230
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on macOS allows a local administrator…
4.0
Medium
CVE-2025-0121
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a…
6.8
Medium
CVE-2025-0112
A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with…
6.8
Medium