CVE Feed

    Dashboard / CVE / CVE-2025-4234

    CVE-2025-4234

    A problem with the Palo Alto Networks Cortex XDR Microsoft 365 Defender Pack can result in exposure of user credentials in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these credentials are exposed to recipients of the application logs.

    Published:Sep 12, 2025
    Last Modified:Apr 15, 2026
    EPS:Sep 12, 2025
    EPSS Score:0.00019
    CVSS Score:2.4

    Affected Products

    Vendor
    Microsoft
    Product
    365
    Vendor
    Palo Alto
    Product
    Networks
    Vendor
    Paloaltonetworks
    Product
    Cortex Xdr
    Vendor
    Paloaltonetworks
    Product
    Cortex Xdr Agent
    Vendor
    Paloaltonetworks
    Product
    Cortex Xsoar

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-215 Fuzzing for application mapping

    Related CVEs

    CVE-2026-81959 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.…
    CVE-2026-81388 (CVSS 7.8) — Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.…
    CVE-2026-81395 (CVSS 5.5) — Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.…
    CVE-2026-81401 (CVSS 5.5) — Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized…
    CVE-2026-80085 (CVSS 8.8) — Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a net…
    CVE-2026-78520 (CVSS 6.5) — Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.…
    CVE-2026-69734 (CVSS 6.5) — Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose informatio…
    CVE-2026-68815 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.…
    CVE-2026-68810 (CVSS 7.8) — Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locall…
    CVE-2026-68796 (CVSS 7.8) — Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High