A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

References

• https://nvd.nist.gov/vuln/detail/CVE-2024-5907
• https://security.paloaltonetworks.com/CVE-2024-5907