What is CVE-2022-0026?

CVE-2022-0026 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2022-0026 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability

Which CVE IDs does CVE-2022-0026 cover?

CVE-2022-0026 covers the following CVE IDs: CVE-2022-0026. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2022-0026?

CVE-2022-0026 affects 1 product, including: Cortex XDR Agent.

CVE-2022-0026Medium

CVE-2022-0026 Cortex XDR Agent: Unintended Program Execution Leads to Local Privilege Escalation (PE) Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

May 11, 2022

Last Modified

May 11, 2022

🔗 CVE IDs covered (1)

CVE-2022-0026 →

📋 Description

A local privilege escalation (PE) vulnerability exists in Palo Alto Networks Cortex XDR agent software on Windows that enables an authenticated local user with file creation privilege in the Windows root directory (such as C:) to execute a program with elevated privileges. This issue impacts all versions of Cortex XDR agent without content update 330 or a later content update version.

🎯 Affected products1

Cortex XDR Agent

✅ Remediation

This issue is fixed in all Cortex XDR agent versions with content update 330 and later content update versions. Workarounds and mitigations: There are no known workarounds for this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2022-0026