CVE-2025-0121
Medium
Description
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Paloaltonetworks Cortex Xdr Agent
PublishedApr 11, 2025
First seenApr 11, 2025
Weakness typeCWE-476NULL pointer dereference
How to fix
Update
- paloaltonetworks cortex_xdr_agent8.6.1, 8.5.2, 8.3.101-CE HF, 7.9.103-CE HF or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| paloaltonetworks cortex_xdr_agent | 8.6.0 ≤ v < 8.6.1, 8.5.0 ≤ v < 8.5.2, 8.3-CE ≤ v < 8.3.101-CE HF, 7.9-CE ≤ v < 7.9.103-CE HF | 8.6.1, 8.5.2, 8.3.101-CE HF, 7.9.103-CE HF |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.