High-severity Chromium browser vulnerability affects Prisma Browser without authentication or special configuration
A high-severity vulnerability affecting Chromium-based browsers has been disclosed, impacting Palo Alto Networks' Prisma Browser versions from 157.19.4 up to but not including 157.19.4.39. The flaw requires no special configuration or authentication and has a CVSS v4.0 base score of 7.7, with the traditional CVSS base score being 9.4, indicating a critical network attack vector requiring user interaction. Although no active exploitation has been observed, defenders should prioritize patching due to the high potential impact involving confidentiality, integrity, and availability consequences. No known workarounds exist for this vulnerability, emphasizing patch application as the primary mitigation method.
Entenda a falha
A vulnerabilidade
Palo Alto Networks advisory PAN-SA-2026-0014 covers the Chromium vulnerabilities fixed in Google's Chrome stable updates, as they affect Prisma Browser. Affected versions are 157.19.4 up to but not including 157.19.4.39. No CVE is listed in the material. The CVSS v4.0 vector is network, low complexity, no privileges, with user interaction (the user must do something), and high impact on confidentiality, integrity and availability. The score is 9.4 as base (CVSS-B) and 7.7 with threat metrics (CVSS-BT). Palo Alto rates it HIGH with MODERATE urgency, and no special configuration is needed to be exposed.
Como foi descoberta
The flaw comes from the upstream Chromium project. Palo Alto Networks published a monthly Chromium update advisory in November 2026 that points to Google's Chrome stable channel release posts from October and November 2026. The material does not say who found the underlying bugs or how. Palo Alto says it is not aware of any malicious exploitation.
Explicação gerada por IA a partir da matéria e dos artigos, em 11/11/2026 14:17.
Linha do tempo
-
High-severity Chromium browser vulnerability affects Prisma Browser without authentication or special configuration
ler a análise desta fonte ocultar
A high-severity vulnerability affecting Chromium-based browsers has been disclosed, impacting Palo Alto Networks' Prisma Browser versions from 157.19.4 up to but not including 157.19.4.39. The flaw requires no special configuration or authentication and has a CVSS v4.0 base score of 7.7, with the traditional CVSS base score being 9.4, indicating a critical network attack vector requiring user interaction. Although no active exploitation has been observed, defenders should prioritize patching due to the high potential impact involving confidentiality, integrity, and availability consequences. No known workarounds exist for this vulnerability, emphasizing patch application as the primary mitigation method.