CVE-2024-5907

MEDIUM Year: 2024
CVSS v3 Score
7.0
High
Weakness Type
CWE-269
View all →

Vulnerability Description

A privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficult to exploit.

Related Vulnerabilities

CVE-2016-2059

HIGH
CVSS:7.0(High)

The msm_ipc_router_bind_control_port function in net/ipc_router/ipc_router_core.c in the IPC router kernel module for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contrib...

CWE-2692016

CVE-2017-6728

HIGH
CVSS:7.0(High)

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of Incorrect Permi...

CWE-2692017

CVE-2018-0821

HIGH
CVSS:7.0(High)

AppContainer in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way constrained impersonation...

CWE-2692018

CVE-2019-1175

HIGH
CVSS:7.0(High)

An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permi...

CWE-2692019

CVE-2019-1177

HIGH
CVSS:7.0(High)

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permis...

CWE-2692019

CVE-2019-12889

HIGH
CVSS:7.0(High)

An unauthenticated privilege escalation exists in SailPoint Desktop Password Reset 7.2. A user with local access to only the Windows logon screen can escalate their privileges to NT AUTHORITY\System. ...

CWE-2692019