Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-0290 1 Palo Alto Networks 1 Prisma Browser 2026-08-13 N/A
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
CVE-2026-0289 1 Palo Alto Networks 1 Prisma Browser 2026-08-13 N/A
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
CVE-2026-0275 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-07-14 6.7 Medium
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.
CVE-2026-0236 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-05-13 7.8 High
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
CVE-2026-0235 2 Palo Alto Networks, Paloaltonetworks 2 Prisma Browser, Prisma Browser 2026-05-13 4.7 Medium
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.
CVE-2026-0237 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-05-13 7.8 High
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
CVE-2025-4618 2 Palo Alto Networks, Paloaltonetworks 2 Prisma Browser, Prisma Browser 2026-04-15 N/A
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.