7.3
Élevée
CVE-2026-0237 An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to…
Description
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Prisma Browser 146.16 | premières → < 146.16.6.165 | 146.16.6.165 |
Références
- security.paloaltonetworks.com security.paloaltonetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Prisma Browser
Les 9 CVE de Prisma Browser →
CVE-2026-0290
An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables…
0.5
Faible
CVE-2026-0289
A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a…
0.5
Faible
CVE-2026-0275
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated…
2.0
Faible
CVE-2026-0235
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to…
5.8
Moyenne