漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Cortex XDR Agent: Improper control of loaded DLL leads to local privilege escalation
Vulnerability Description
A local privilege escalation vulnerability exists in Palo Alto Networks Cortex XDR Agent on the Windows platform that allows an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory. This issue impacts: All versions of Cortex XDR Agent 7.1 with content update 149 and earlier versions; All versions of Cortex XDR Agent 7.2 with content update 149 and earlier versions.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
对搜索路径元素未加控制
Vulnerability Title
Palo Alto Networks Cortex XDR Agent 代码问题漏洞
Vulnerability Description
Palo Alto Networks Cortex XDR Agent是马来西亚Palo Alto Networks公司的一个用于检测客户端设备安全性的客户端软件。 Palo Alto Networks Cortex XDR 存在安全漏洞，该漏洞源于在Windows平台上的代理中存在一个本地特权升级漏洞，该漏洞允许经过身份验证的本地Windows用户使用系统特权执行程序。
CVSS Information
N/A
Vulnerability Type
N/A