CVE-2026-4450146
CVE-2026-4450146: 3 tracked advisory records across Palo Alto. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Palo Alto
3 advisories- Advisory severityUnrated
Advisory [CVE-2026-0235 +151] code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its…
CVE-2026-0236Source published Source updated
This bulletin covers 152 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
A code injection vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to its AppleScript interface allowing a locally authenticated non-admin user to leverage this exposed Apple Event handler to send unauthorized commands to the browser.
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Prisma Browser: < 146.10.7.154
- Source-reported fixed versions
- Prisma Browser: >= 148.6.3.96
- Mitigation guidance
- Upgrade to a fixed release: Prisma Browser: >= 148.6.3.96.
- Workarounds
- No known workarounds exist for this issue.
- Advisory severityUnrated
Advisory [CVE-2026-0235 +151] race condition vulnerability in Palo Alto Networks Prisma® Browser
CVE-2026-0235Source published Source updated
This bulletin covers 152 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
A race condition vulnerability in Palo Alto Networks Prisma® Browser enables a locally authenticated non-admin user to bypass certain access and data control policies.
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Prisma Browser: < 146.10.7.154
- Source-reported fixed versions
- Prisma Browser: >= 148.6.3.96
- Mitigation guidance
- Upgrade to a fixed release: Prisma Browser: >= 148.6.3.96.
- Workarounds
- No known workarounds exist for this issue.
- Advisory severityUnrated
Advisory [CVE-2026-0235 +151] improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict…
CVE-2026-0237Source published Source updated
This bulletin covers 152 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
An improper protection of alternate path vulnerability in Palo Alto Networks Prisma® Browser on macOS fails to properly restrict access to an internal automation bridge. This allows a locally authenticated non-admin user to leverage an exposed communication channel to send unauthorized commands to the browser, bypassing security controls.
- Related products — impact not confirmed
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- Prisma Browser: < 146.10.7.154
- Source-reported fixed versions
- Prisma Browser: >= 148.6.3.96
- Mitigation guidance
- Upgrade to a fixed release: Prisma Browser: >= 148.6.3.96.
- Workarounds
- No known workarounds exist for this issue.
Android app · Google Play
Monitor future Palo Alto CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.