VULNERABILITY INTELLIGENCE
CVE-2025-0121
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-04-11
Last modified2026-06-17
Description
A null pointer dereference vulnerability in the Palo Alto Networks Cortex® XDR agent on Windows devices allows a low-privileged local Windows user to crash the agent. Additionally, malware can use this vulnerability to perform malicious activity without Cortex XDR being able to detect it.
Weakness classification
- psirt@paloaltonetworks.com: CWE-476