Security Advisory
CVE-2024-5909
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity.