Exploit for #VU94359 Improper privilege management in Cortex XDR Agent for Windows

Vulnerability identifier: #VU94359

Vulnerability risk: Low

CVSSv4.0: 5.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2024-5909

CWE-ID: CWE-269

Exploitation vector: Local

Exploits in database: 1

• June 27, 2025
  • EDR-ALPC-Block-POC (Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20671)) [Github]

Vulnerable software:
Cortex XDR Agent for Windows
Client/Desktop applications / Antivirus software/Personal firewalls

Vendor: