Prisma Browser
Monthly
Prisma Browser's Account Protection feature insufficiently protects sensitive credential data (CWE-522), allowing a local attacker to read it without elevated privileges. All tracked versions are in scope per the wildcard CPE string. The vulnerability carries a CVSS 4.0 base score of 0.5, is not listed in the CISA KEV catalog, and no public exploit code has been identified, placing this firmly in the low-priority tier for most deployment contexts.
Account Protection bypass in Palo Alto Networks Prisma Browser allows a local user to circumvent intended security controls due to insufficiently protected credentials (CWE-522), yielding low confidentiality exposure with no integrity or availability impact. The CVSS 4.0 score of 0.5 reflects the constrained attack surface - local access only, specific target conditions required (AT:P), and minimal data exposure. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog, consistent with the Exploit Maturity modifier E:U (Unreported).
Privilege escalation in Palo Alto Networks Prisma® Browser on macOS enables a locally authenticated administrator with access to the local filesystem to perform actions at root privilege level. The vulnerability is scoped exclusively to macOS deployments of Prisma Browser - no other platforms or Palo Alto products are implicated per the advisory. No public exploit identified at time of analysis; the CVSS 4.0 base score of 2.0 reflects the substantial exploitation prerequisites that materially constrain real-world risk despite the full-system impact potential at root level.
Policy bypass in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to circumvent access and data control policies via a race condition, potentially exposing restricted data with high confidentiality impact to the vulnerable system. Affected versions span all releases prior to 146.16.6.165, per EUVD-2026-30087 and vendor advisory. No active exploitation is confirmed - the vulnerability is absent from CISA KEV, EPSS sits at 0.01% (3rd percentile), and SSVC assessment categorizes exploitation status as none - indicating this is a low-urgency but architecturally meaningful trust boundary weakness in an enterprise browser control product.
Local code injection in Palo Alto Networks Prisma Browser on macOS lets an authenticated non-admin user abuse an exposed AppleScript/Apple Event handler to send unauthorized commands to the browser, with high impact on confidentiality and integrity. No public exploit identified at time of analysis, and EPSS is very low (0.02%), but SSVC rates the technical impact as total once the local foothold exists. Affects all Prisma Browser releases prior to 146.16.6.165 on macOS.
Local privilege escalation in Palo Alto Networks Prisma Browser on macOS allows a locally authenticated non-admin user to access an internal automation bridge that was insufficiently restricted, enabling unauthorized commands to be sent to the browser and bypassing built-in security controls. The flaw is tracked as CVE-2026-0237 with a CVSS 4.0 score of 7.3 and no public exploit identified at time of analysis, though SSVC rates the technical impact as total.
Prisma Browser's Account Protection feature insufficiently protects sensitive credential data (CWE-522), allowing a local attacker to read it without elevated privileges. All tracked versions are in scope per the wildcard CPE string. The vulnerability carries a CVSS 4.0 base score of 0.5, is not listed in the CISA KEV catalog, and no public exploit code has been identified, placing this firmly in the low-priority tier for most deployment contexts.
Account Protection bypass in Palo Alto Networks Prisma Browser allows a local user to circumvent intended security controls due to insufficiently protected credentials (CWE-522), yielding low confidentiality exposure with no integrity or availability impact. The CVSS 4.0 score of 0.5 reflects the constrained attack surface - local access only, specific target conditions required (AT:P), and minimal data exposure. No public exploit code exists and the vulnerability is not listed in the CISA KEV catalog, consistent with the Exploit Maturity modifier E:U (Unreported).
Privilege escalation in Palo Alto Networks Prisma® Browser on macOS enables a locally authenticated administrator with access to the local filesystem to perform actions at root privilege level. The vulnerability is scoped exclusively to macOS deployments of Prisma Browser - no other platforms or Palo Alto products are implicated per the advisory. No public exploit identified at time of analysis; the CVSS 4.0 base score of 2.0 reflects the substantial exploitation prerequisites that materially constrain real-world risk despite the full-system impact potential at root level.
Policy bypass in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to circumvent access and data control policies via a race condition, potentially exposing restricted data with high confidentiality impact to the vulnerable system. Affected versions span all releases prior to 146.16.6.165, per EUVD-2026-30087 and vendor advisory. No active exploitation is confirmed - the vulnerability is absent from CISA KEV, EPSS sits at 0.01% (3rd percentile), and SSVC assessment categorizes exploitation status as none - indicating this is a low-urgency but architecturally meaningful trust boundary weakness in an enterprise browser control product.
Local code injection in Palo Alto Networks Prisma Browser on macOS lets an authenticated non-admin user abuse an exposed AppleScript/Apple Event handler to send unauthorized commands to the browser, with high impact on confidentiality and integrity. No public exploit identified at time of analysis, and EPSS is very low (0.02%), but SSVC rates the technical impact as total once the local foothold exists. Affects all Prisma Browser releases prior to 146.16.6.165 on macOS.
Local privilege escalation in Palo Alto Networks Prisma Browser on macOS allows a locally authenticated non-admin user to access an internal automation bridge that was insufficiently restricted, enabling unauthorized commands to be sent to the browser and bypassing built-in security controls. The flaw is tracked as CVE-2026-0237 with a CVSS 4.0 score of 7.3 and no public exploit identified at time of analysis, though SSVC rates the technical impact as total.