CVE-2025-4617
LowCVSS 1.1Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
Risk Assessment
A non-admin user can capture screenshots of sensitive information, bypassing organizational security policies.
Recommendation
Enable the Browser self-protection feature in Prisma Browser.
Other vulnerabilities in Prisma Browser
See all- CVE-2026-0275Medium
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser on macOS allows a locally authenticated administrator with access to the local filesystem to perform actions with root privileges.
- CVE-2026-0235Medium
A race condition vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to bypass certain access and data control policies.
Original NVD description (English source)
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS