Palo Alto Networks Prisma Browser vulnerabilities

9 vulnerabilities

Known vulnerabilities in Palo Alto Networks Prisma Browser, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

1.1CVE-2025-4616palo alto networksprisma browser
EPSS score
0.12%
An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.1.1CVE-2025-4617palo alto networksprisma browser
EPSS score
0.14%
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.4.4CVE-2025-4618palo alto networksprisma browser
EPSS score
0.09%
A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.7.8CVE-2026-0236palo alto networksprisma browser+1
EPSS score
0.16%
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.6.5CVE-2026-0289palo alto networksprisma browser+1
EPSS score
0.22%
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.5.8CVE-2026-0235palo alto networksprisma browser+1
EPSS score
0.11%
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.7.8CVE-2026-0237palo alto networksprisma browser+1
EPSS score
0.15%
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.5.5CVE-2026-0290palo alto networksprisma browser+1
EPSS score
0.13%
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.6.7CVE-2026-0275palo alto networksprisma browser+1
EPSS score
0.17%
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.