7.3
High
CVE-2026-0237 An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to…
Description
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Browser 146.16 | earliest → < 146.16.6.165 | 146.16.6.165 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Prisma Browser
The 9 CVEs of Prisma Browser →
CVE-2026-0290
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables…
0.5
Low
CVE-2026-0289
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a…
0.5
Low
CVE-2026-0275
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated…
2.0
Low
CVE-2026-0235
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to…
5.8
Medium