CVE-2025-0121

Publication date

2025-04-11 01:45:54

Family

palo_alto

State

PUBLISHED

Description

A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.