Veille CVE

Recherche « Paloaltonetworks prisma browser »

6 CVE

Critique 0 Élevée 2 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Paloaltonetworks prisma browser » ✕
  1. CVE-2026-0290 5.5 Moyenne

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.

  2. CVE-2026-0289 6.5 Moyenne

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.

  3. CVE-2026-0275 6.7 Moyenne

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.

  4. CVE-2026-0236 7.8 Élevée

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.

  5. CVE-2026-0235 4.7 Moyenne

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.

  6. CVE-2026-0237 7.8 Élevée

    Palo Alto Networks Prisma Browser · Paloaltonetworks prisma browser

    An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.