Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2026-0275

Prisma Browser: Local Privilege Escalation on macOS

A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.

CVSS 4.0 · 2 Low EPSS < 1% KEV · Not listed
Vendors
Apple Palo Alto Networks Paloaltonetworks
Products
Macos Prisma Browser Prisma Browser
CVE-2026-0236

Prisma Browser: Code Injection Enables Security Controls Bypass

A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Apple Palo Alto Networks Paloaltonetworks
Products
Macos Prisma Browser Prisma Browser
CVE-2026-0237

Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass

An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Apple Palo Alto Networks Paloaltonetworks
Products
Macos Prisma Browser Prisma Browser
CVE-2025-4616

Prisma Browser: Insufficient Validation of Untrusted Input Vulnerability in Prisma Browser

An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Paloaltonetworks
Products
Prisma Browser
CVE-2025-4618

Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser. Browser self-protection should be enabled to mitigate this issue.

CVSS 4.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Palo Alto Networks Paloaltonetworks
Products
Prisma Browser Prisma Browser
CVE-2025-4617

Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.

CVSS 4.0 · 1.1 Low EPSS < 1% KEV · Not listed
Vendors
Microsoft Paloaltonetworks
Products
Windows Prisma Browser