Palo Alto Networks announced the availability of patches for security flaws in the Cortex XDR Agent. Updates fix the following issues:

CVE-2022-0012 - Local arbitrary file deletion vulnerability in the Palo Alto Networks Cortex XDR agent;

CVE-2022-0013 - A file information exposure vulnerability in the Palo Alto Networks Cortex XDR agent;

CVE-2022-0014 - security vulnerability in the Palo Alto Networks Cortex XDR agent;

CVE-2022-0015 - A local privilege escalation (PE) vulnerability in the Palo Alto Networks Cortex XDR agent.

More information on vulnerabilities and updates is available in Palo Alto Networks security advisories – paloaltonetworks.com.