Paloaltonetworks Prisma Browser vulnerabilities

6 vulnerabilities

Known vulnerabilities in Paloaltonetworks Prisma Browser, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2026-0236palo alto networksprisma browser+1
EPSS score
0.16%
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.6.5CVE-2026-0289palo alto networksprisma browser+1
EPSS score
0.22%
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.5.8CVE-2026-0235palo alto networksprisma browser+1
EPSS score
0.11%
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.7.8CVE-2026-0237palo alto networksprisma browser+1
EPSS score
0.15%
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.5.5CVE-2026-0290palo alto networksprisma browser+1
EPSS score
0.13%
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.6.7CVE-2026-0275palo alto networksprisma browser+1
EPSS score
0.17%
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.