Approved changes feed: RSS · Atom

cpe:2.3:a:palo_alto_networks:prisma_browser:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPalo Alto Networks (b3fb2ed8-9543-594b-b76a-18c6d89c012d)
ProductPrisma Browser (2a242a03-808e-5a14-a3e6-fd448dfd79d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0289 vulnerable 2026-09-16 04:33:34.044540 Prisma Browser: Inappropriate Implementation in Account Protection
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
Published: 2026-08-13T01:44:29.032Z
Updated: 2026-08-13T13:18:31.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0290 vulnerable 2026-09-16 04:33:32.622859 Prisma Browser: Sensitive Information Disclosure Vulnerability
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
Published: 2026-08-13T01:45:39.372Z
Updated: 2026-08-13T13:43:04.567Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0275 vulnerable 2026-07-29 00:20:50.091486 Prisma Browser: Local Privilege Escalation on macOS
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.
Published: 2026-07-09T19:19:24.198Z
Updated: 2026-07-14T14:32:31.774Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0237 vulnerable 2026-06-08 07:47:11.177045 Prisma Browser: Improperly Restricted Automation Bridge Allows Security Bypass
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Published: 2026-05-13T17:48:17.677Z
Updated: 2026-05-14T03:56:35.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0236 vulnerable 2026-06-08 07:47:11.176667 Prisma Browser: Code Injection Enables Security Controls Bypass
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
Published: 2026-05-13T17:55:04.370Z
Updated: 2026-05-15T03:56:03.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-0235 vulnerable 2026-06-08 07:47:11.176159 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4618 vulnerable 2026-06-08 07:29:16.658237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4617 vulnerable 2026-06-08 07:29:16.657709 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-4616 vulnerable 2026-06-08 07:29:16.656986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.