Palo Alto Networks Prisma Browser affected by October 2026 Chromium vulnerabilities (PAN-SA-2026-0013)
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any malicious exploitation. The advisory lists no individual CVE identifiers, only links to the Chrome Releases blog posts for September and October 2026.
Detalhes técnicos
- Affected: Prisma Browser from 155.16.5 (inclusive) up to, but excluding, 155.16.5.40.
- No special configuration is required to be exposed.
- Scoring: CVSS-BT 7.7 and CVSS-B 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U). The vector indicates network attack, no privileges required, user interaction passive, and exploit maturity unreported.
- No known workarounds exist.
Remediação
- Update Prisma Browser to version 155.16.5.40 or later, which incorporates the upstream Chromium fixes.
- Review the referenced Chrome Releases posts for the specific upstream vulnerabilities addressed.
Linha do tempo
-
Palo Alto Networks Prisma Browser affected by October 2026 Chromium vulnerabilities (PAN-SA-2026-0013)
ler a análise desta fonte ocultar
Palo Alto Networks published advisory PAN-SA-2026-0013, its monthly Chromium vulnerability update for October 2026. It states that Prisma Browser is affected by vulnerabilities fixed in recent upstream Chromium Stable Channel releases. The vendor rates severity HIGH with suggested urgency MODERATE. Palo Alto Networks is not aware of any malicious exploitation. The advisory lists no individual CVE identifiers, only links to the Chrome Releases blog posts for September and October 2026.
Technical Details
- Affected: Prisma Browser from 155.16.5 (inclusive) up to, but excluding, 155.16.5.40.
- No special configuration is required to be exposed.
- Scoring: CVSS-BT 7.7 and CVSS-B 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U). The vector indicates network attack, no privileges required, user interaction passive, and exploit maturity unreported.
- No known workarounds exist.
Remediation
- Update Prisma Browser to version 155.16.5.40 or later, which incorporates the upstream Chromium fixes.
- Review the referenced Chrome Releases posts for the specific upstream vulnerabilities addressed.