CVE-2022-0026

CVE-2022-0026 is a local privilege escalation in the Windows Cortex XDR agent from Palo Alto Networks. An authenticated local user who has file creation rights in the Windows root directory (e.g., C:) can cause the agent to execute a program with elevated privileges. The issue affects all Cortex ...