Search Results (7 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-0275 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-07-14 6.7 Medium
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.
CVE-2026-0236 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-05-13 7.8 High
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
CVE-2026-0235 2 Palo Alto Networks, Paloaltonetworks 2 Prisma Browser, Prisma Browser 2026-05-13 4.7 Medium
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.
CVE-2026-0237 3 Apple, Palo Alto Networks, Paloaltonetworks 3 Macos, Prisma Browser, Prisma Browser 2026-05-13 7.8 High
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
CVE-2025-4616 1 Paloaltonetworks 1 Prisma Browser 2026-04-15 N/A
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.
CVE-2025-4617 2 Microsoft, Paloaltonetworks 2 Windows, Prisma Browser 2026-04-15 N/A
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
CVE-2025-4618 2 Palo Alto Networks, Paloaltonetworks 2 Prisma Browser, Prisma Browser 2026-04-15 N/A
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.