CVE-2026-0275
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser on macOS allows a locally authenticated administrator with access to the local filesystem to perform actions with root privileges.
Risk Assessment
The risk involves privilege escalation, potentially allowing an attacker to gain full control over the device, including system modification, malware installation, or data theft.
Recommendation
It is recommended to immediately apply patches provided by Palo Alto Networks and restrict administrative access to the macOS system to trusted users only.
Other vulnerabilities in Prisma Browser
See all- CVE-2026-0235Medium
A race condition vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to bypass certain access and data control policies.
- CVE-2025-4617Low
An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser. Browser self-protection should be enabled to mitigate this issue.
Original NVD description (English source)
A local privilege escalation vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated administrator with access to the macOS local filesystem to perform actions on the device with root privileges. This issue only affects Prisma® Browser on macOS.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS