7.3
High
CVE-2026-0236 A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its…
Description
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Prisma Browser 146.16 | earliest → < 146.16.6.165 | 146.16.6.165 |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Prisma Browser
The 9 CVEs of Prisma Browser →
CVE-2026-0290
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables…
0.5
Low
CVE-2026-0289
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a…
0.5
Low
CVE-2026-0275
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated…
2.0
Low
CVE-2026-0235
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to…
5.8
Medium