Palo Alto Networks: Numerous security vulnerabilities in Prisma Browser closed

Networks of companies using software from Palo Alto Networks are vulnerable. The reason is several security vulnerabilities in, among others, GlobalProtect App, PAN-OS, and Prisma. Security patches provide a remedy. At present, the IT security company has no indications that attackers are already exploiting the vulnerabilities.

All now closed security vulnerabilities can be found in the security section of the Palo Alto Networks website. According to a post , the developers have closed most of the vulnerabilities in the Chromium-based enterprise browser Prisma. Among them are numerous vulnerabilities that attackers can use to trigger memory errors. This often leads to malicious code being installed on systems, rendering them completely compromised. The developers assure that Prisma Browser 150.49.8.187 is now protected against this.

Palo Alto Networks always provides two danger classifications based on CVSS Score 4.0: In the case of Prisma, CVSS-B is rated “ critical ” at 9.2 and CVSS-BT at 7.2 “ high ”. B stands for Base, and this value is considered the standard classification of the severity of a security vulnerability. BT stands for Base + Threat and extends the Base score with the current threat landscape. Consequently, in this case, it is already critical, but since no ongoing attacks are currently known, administrators do not need to act immediately.

The majority of the remaining vulnerabilities affect the GlobalProtect App for establishing VPN connections in companies. The clients for Android, macOS, and Windows, among others, are affected. According to the description of a post , attackers can gain administrative privileges by successfully exploiting a vulnerability (CVE-2026-0299 B “ high ”, BT “ medium ”).

This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.