PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026)
Exploit Maturity
UNREPORTED
Response Effort
MODERATE
Recovery
USER
Value Density
DIFFUSE
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Automatable
NO
User Interaction
PASSIVE
Product Confidentiality
HIGH
Product Integrity
HIGH
Product Availability
HIGH
Privileges Required
NONE
Subsequent Confidentiality
HIGH
Subsequent Integrity
HIGH
Subsequent Availability
HIGH
Description
Palo Alto Networks incorporated the following Chromium security fixes into our products:
- https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.html
- https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0194356994.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html
- https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html
| CVE | Summary |
|---|---|
| CVE-2026-85042 | Use after free in DevTools |
| CVE-2026-85043 | Incomplete cleanup in Network |
| CVE-2026-85044 | Use of released resource in Mobile |
| CVE-2026-85045 | Race condition in V8 |
| CVE-2026-85046 | Type confusion in V8 |
| CVE-2026-85047 | Improper input validation in Transactions Platform |
| CVE-2026-85048 | Use after free in Compositing |
| CVE-2026-85049 | Use after free in Skia |
| CVE-2026-85050 | Out of bounds write in WebGL |
| CVE-2026-85051 | Type confusion in Compositing |
| CVE-2026-85052 | Out of bounds read in CrashReporting |
| CVE-2026-85053 | Improper resource exposure in CacheStorage |
| CVE-2026-87429 | Missing authorization in ServiceWorker |
| CVE-2026-87430 | Buffer overflow in WebRTC |
| CVE-2026-87431 | Missing authorization in Extensions |
| CVE-2026-87432 | Incorrect authorization in Navigation |
| CVE-2026-87433 | Race condition in FileAPI |
| CVE-2026-87434 | Missing authorization in CORS |
| CVE-2026-87435 | Information leak in ControlledFrame |
| CVE-2026-87436 | Incomplete cleanup in Browser |
| CVE-2026-87437 | Information leak in Frames |
| CVE-2026-87438 | Out of bounds write in WebGL |
| CVE-2026-87439 | Information leak in ServiceWorker |
| CVE-2026-87440 | Out of bounds read in Media |
| CVE-2026-87441 | Missing authorization in Downloads |
| CVE-2026-87442 | Confused deputy in Prerender |
| CVE-2026-87443 | Missing authorization in Actor |
| CVE-2026-87444 | Memory corruption in Codecs |
| CVE-2026-87445 | UI misrepresentation in Session |
| CVE-2026-87446 | Incomplete cleanup in Extensions |
| CVE-2026-87447 | Incorrect authorization in Network |
| CVE-2026-87448 | Use after free in DevTools |
| CVE-2026-87449 | Cross-site request forgery in DeviceBoundSessionCredentials |
| CVE-2026-87450 | Incorrect authorization in Permissions |
| CVE-2026-87451 | Information leak in Downloads |
| CVE-2026-87452 | Incorrect authorization in GPU |
| CVE-2026-87453 | Confused deputy in BackgroundFetch |
| CVE-2026-87454 | Information leak in Enterprise |
| CVE-2026-87455 | Use after free in Aura |
| CVE-2026-87456 | Uninitialized resource in Media |
| CVE-2026-87457 | Race condition in Updater |
| CVE-2026-87458 | UI misrepresentation in Geometry |
| CVE-2026-87459 | Observable discrepancy in Select |
| CVE-2026-87460 | Use after free in Platform |
| CVE-2026-87461 | Information leak in Core |
| CVE-2026-87462 | UI misrepresentation in FedCM |
| CVE-2026-87463 | Incorrect authorization in Certificate |
| CVE-2026-87464 | Use after free in WebGL |
| CVE-2026-87465 | Incorrect authorization in Downloads |
| CVE-2026-87466 | Incorrect authorization in Workers |
| CVE-2026-87467 | Race condition in Updater |
| CVE-2026-87468 | Incorrect authorization in Isolated |
| CVE-2026-87469 | Improper input validation in Extensions |
| CVE-2026-87470 | Improper quantity validation in Tint |
| CVE-2026-87471 | Incorrect authorization in ServiceWorker |
| CVE-2026-87472 | Improper input validation in FedCM |
| CVE-2026-87473 | Incorrect authorization in FileHandling |
| CVE-2026-87474 | Use after free in Payments |
| CVE-2026-87475 | Missing authorization in Omnibox |
| CVE-2026-87476 | Incorrect authorization in Loader |
| CVE-2026-87477 | Information leak in Core |
| CVE-2026-87478 | Observable discrepancy in Autofill |
| CVE-2026-87479 | Insufficient policy enforcement in Extensions |
| CVE-2026-87480 | Use after free in Printing |
| CVE-2026-87481 | Incorrect authorization in WebView |
| CVE-2026-87482 | Cleartext transmission of sensitive data in HttpsUpgrades |
| CVE-2026-87483 | Incorrect authorization in Browser |
| CVE-2026-87484 | UI misrepresentation in Geometry |
| CVE-2026-87485 | Incorrect authorization in CORS |
| CVE-2026-87486 | Clickjacking in TrustedWebActivities |
| CVE-2026-87487 | Missing authorization in FileSystem |
| CVE-2026-87488 | Use after free in WebGL |
| CVE-2026-87489 | Memory corruption in V8 |
| CVE-2026-87490 | Information leak in Transactions Platform |
| CVE-2026-87491 | Out of bounds write in V8 |
| CVE-2026-87492 | Incorrect authorization in DevTools |
| CVE-2026-87493 | Missing authorization in FileSystem |
| CVE-2026-87494 | Use after free in Browser |
| CVE-2026-87495 | Information leak in Scroll |
| CVE-2026-87496 | UI misrepresentation in Browser |
| CVE-2026-87497 | Uninitialized resource in Codecs |
| CVE-2026-87498 | Missing authorization in WebUI |
| CVE-2026-87499 | Incorrect authorization in Network |
| CVE-2026-87500 | Improper validation of array index in ANGLE |
| CVE-2026-87501 | UI misrepresentation in Passwords |
| CVE-2026-87502 | Confused deputy in Fullscreen |
| CVE-2026-87503 | Inappropriate implementation in Downloads |
| CVE-2026-87504 | Use after free in Core |
| CVE-2026-87505 | Incorrect authorization in FileSystem |
| CVE-2026-87506 | Privilege elevation in WebUI |
| CVE-2026-87507 | UI misrepresentation in Downloads |
| CVE-2026-87508 | Incorrect authorization in Loader |
| CVE-2026-87509 | Incorrect authorization in Updater |
| CVE-2026-87510 | Improper input validation in FileAPI |
| CVE-2026-87511 | Missing authorization in DevTools |
| CVE-2026-87512 | Use after free in ANGLE |
| CVE-2026-87513 | Missing authorization in ControlledFrame |
| CVE-2026-87514 | Use after free in Views |
| CVE-2026-87515 | Incorrect authorization in FileAPI |
| CVE-2026-87516 | Observable discrepancy in Navigation |
| CVE-2026-87517 | Race condition in Mobile |
| CVE-2026-87518 | Observable discrepancy in Safebrowsing |
| CVE-2026-87519 | Incorrect authorization in Safebrowsing |
| CVE-2026-87520 | Use after free in Dawn |
| CVE-2026-87521 | Information leak in WebMCP |
| CVE-2026-87522 | Missing authorization in WebView |
| CVE-2026-87523 | Race condition in DataTransfer |
| CVE-2026-87524 | Use after free in Core |
| CVE-2026-87525 | Out of bounds read in Chromoting |
| CVE-2026-87526 | Use after free in Passwords |
| CVE-2026-87527 | Buffer overflow in WebGL |
| CVE-2026-87528 | Type confusion in Rust |
| CVE-2026-87529 | Numeric truncation error in Media |
| CVE-2026-87530 | Uncontrolled search path element in CredentialProvider |
| CVE-2026-87531 | Information leak in CORS |
| CVE-2026-87532 | Improper state validation in Safebrowsing |
| CVE-2026-87533 | Use after free in DevTools |
| CVE-2026-87534 | Missing authorization in WebView |
| CVE-2026-87535 | Information loss or omission in Safebrowsing |
| CVE-2026-87536 | Use after free in V8 |
| CVE-2026-87537 | Missing authorization in Extensions |
| CVE-2026-87538 | Clickjacking in Input |
| CVE-2026-87539 | Observable discrepancy in Network |
| CVE-2026-87540 | Incorrect authorization in Isolated |
| CVE-2026-87541 | Information leak in Navigation |
| CVE-2026-87542 | Use after free in Input |
| CVE-2026-87543 | Missing authorization in Core |
| CVE-2026-87544 | Incorrect authorization in Extensions |
| CVE-2026-87545 | Information leak in Mobile |
| CVE-2026-87546 | Incorrect type conversion or cast in Safebrowsing |
| CVE-2026-87547 | Incorrect reference resolution in FileSystem |
| CVE-2026-87548 | Improper state validation in Installer |
| CVE-2026-87549 | Incomplete cleanup in Downloads |
| CVE-2026-87550 | Improper encoding or escaping of output in CSS |
| CVE-2026-87551 | Improper certificate validation in CORS |
| CVE-2026-87552 | Missing authorization in TrustedWebActivities |
| CVE-2026-87553 | Improper input validation in SiteIsolation |
| CVE-2026-87554 | Race condition in Chromoting |
| CVE-2026-87555 | Uninitialized resource in GPU |
| CVE-2026-87556 | Missing authorization in Browser |
| CVE-2026-87557 | Missing authorization in LocalNetworkAccess |
| CVE-2026-87558 | Use after free in Payments |
| CVE-2026-87559 | UI misrepresentation in UI |
| CVE-2026-87560 | Missing authorization in Browser |
| CVE-2026-87561 | Incorrect authorization in Web Authentication |
| CVE-2026-87562 | Incorrect reference resolution in Accessibility |
| CVE-2026-87563 | Origin validation error in Paint |
| CVE-2026-87564 | Type confusion in V8 |
| CVE-2026-87565 | Information leak in Passwords |
| CVE-2026-87566 | Observable discrepancy in Layout |
| CVE-2026-87567 | UI misrepresentation in UrlFormatting |
| CVE-2026-87568 | Improper input validation in Chromium |
| CVE-2026-87569 | Missing authorization in Views |
| CVE-2026-87570 | Incorrect authorization in SiteIsolation |
| CVE-2026-87571 | Improper certificate validation in Loader |
| CVE-2026-87572 | Injection in DevTools |
| CVE-2026-87573 | Improper input validation in Network |
| CVE-2026-87574 | Information leak in ServiceWorker |
| CVE-2026-87575 | Incorrect authorization in Loader |
| CVE-2026-87576 | Uninitialized resource in GPU |
| CVE-2026-87577 | Incorrect authorization in Isolated |
| CVE-2026-87578 | Use after free in Receiver |
| CVE-2026-87579 | Buffer overflow in WebRTC |
| CVE-2026-87580 | Incorrect authorization in WebAppInstalls |
| CVE-2026-87581 | Use after free in Payments |
| CVE-2026-87582 | Confused deputy in DataTransfer |
| CVE-2026-87583 | UI misrepresentation in Passwords |
| CVE-2026-87584 | Incorrect authorization in WebUI |
| CVE-2026-87585 | Double free in PDFium |
| CVE-2026-87586 | Out of bounds read in ANGLE |
| CVE-2026-87587 | Use after free in V8 |
| CVE-2026-87588 | Use after free in Chromecast |
| CVE-2026-87589 | Incorrect authorization in SiteIsolation |
| CVE-2026-87590 | Improper input validation in Passwords |
| CVE-2026-87591 | Incorrect authorization in Extensions |
| CVE-2026-87592 | Out of bounds read in Tint |
| CVE-2026-87593 | Information leak in Editing |
| CVE-2026-87594 | Incorrect authorization in DataTransfer |
| CVE-2026-87595 | Server-side request forgery in Mobile |
| CVE-2026-87596 | Out of bounds read in ANGLE |
| CVE-2026-87597 | UI misrepresentation in CustomTabs |
| CVE-2026-87598 | Incorrect authorization in ServiceWorker |
| CVE-2026-87599 | Improper input validation in Interstitials |
| CVE-2026-87600 | Improper input validation in Safebrowsing |
| CVE-2026-87601 | Race condition in V8 |
| CVE-2026-87602 | Out of bounds read in ANGLE |
| CVE-2026-87603 | Missing authorization in FileSystem |
| CVE-2026-87604 | Out of bounds read in ANGLE |
| CVE-2026-87605 | Missing authorization in Contacts |
| CVE-2026-87606 | Missing authorization in SiteIsolation |
| CVE-2026-87607 | Use after free in Device |
| CVE-2026-87608 | Improper certificate validation in FedCM |
| CVE-2026-87609 | Use after free in Sharing |
| CVE-2026-87610 | Incorrect authorization in Omnibox |
| CVE-2026-87611 | Missing authorization in FileSystem |
| CVE-2026-87612 | Type confusion in V8 |
| CVE-2026-87613 | Incorrect reference resolution in Extensions |
| CVE-2026-87614 | Incorrect authorization in ServiceWorker |
| CVE-2026-87615 | Race condition in Payments |
| CVE-2026-87616 | Improper initialization in Views |
| CVE-2026-87617 | Use after free in DevTools |
| CVE-2026-87618 | Incorrect reference resolution in Storage |
| CVE-2026-87619 | Observable discrepancy in Prefetch |
| CVE-2026-87620 | Observable discrepancy in SVG |
| CVE-2026-87621 | Out of bounds write in ANGLE |
| CVE-2026-87622 | Missing authorization in FedCM |
| CVE-2026-87623 | Observable discrepancy in DOM |
| CVE-2026-87624 | UI misrepresentation in Passwords |
| CVE-2026-87625 | Use after free in V8 |
| CVE-2026-87626 | Incorrect authorization in DeviceBoundSessionCredentials |
| CVE-2026-87627 | Interpretation conflict in Safebrowsing |
| CVE-2026-87628 | Use after free in Cast |
| CVE-2026-87629 | Incorrect authorization in Sources |
| CVE-2026-87630 | Integer overflow in WebRTC |
| CVE-2026-87631 | Missing authorization in DOM |
| CVE-2026-87632 | Cross-site scripting in SanitizerAPI |
| CVE-2026-87633 | Use after free in Views |
| CVE-2026-87634 | Use after free in WebPackaging |
| CVE-2026-87635 | UI misrepresentation in Payments |
| CVE-2026-87636 | Type confusion in XML |
| CVE-2026-87637 | Use after free in Extensions |
| CVE-2026-87638 | Out of bounds write in Media |
| CVE-2026-87639 | Use after free in WebPackaging |
| CVE-2026-87640 | Out of bounds read in WebView |
| CVE-2026-87641 | Race condition in Browser |
| CVE-2026-87642 | Uninitialized resource in WebGL |
| CVE-2026-87643 | Integer overflow in GPU |
| CVE-2026-87644 | Incorrect authorization in Views |
| CVE-2026-87645 | Improper state validation in Safebrowsing |
| CVE-2026-87646 | Use after free in Web Authentication |
| CVE-2026-87647 | Uninitialized resource in GPU |
| CVE-2026-87648 | Use after free in ANGLE |
| CVE-2026-87649 | UI misrepresentation in Downloads |
| CVE-2026-87650 | Out of bounds read in WebGL |
| CVE-2026-87651 | Incorrect authorization in Paint |
| CVE-2026-87652 | Incorrect authorization in PushAPI |
| CVE-2026-87653 | UI misrepresentation in FullScreen |
| CVE-2026-87654 | Buffer overflow in ANGLE |
| CVE-2026-87655 | Clickjacking in Downloads |
| CVE-2026-87656 | Improper state validation in Safebrowsing |
| CVE-2026-87657 | Use after free in V8 |
| CVE-2026-87658 | Information leak in Extensions |
| CVE-2026-91708 | Race condition in Network |
| CVE-2026-91709 | Type confusion in ServiceWorker |
| CVE-2026-91710 | Use after free in WebAppInstalls |
| CVE-2026-91711 | Out of bounds write in ServiceWorker |
| CVE-2026-91712 | Race condition in Extensions |
| CVE-2026-91713 | Missing authorization in Browser |
| CVE-2026-91714 | Observable discrepancy in Fonts |
| CVE-2026-91715 | Type confusion in ServiceWorker |
| CVE-2026-91716 | Use after free in Auth |
| CVE-2026-91717 | Missing authorization in Android |
| CVE-2026-91718 | Use after free in Core |
| CVE-2026-91719 | Code injection in XML |
| CVE-2026-91720 | Uninitialized resource in ANGLE |
| CVE-2026-91721 | Use after free in Internals |
| CVE-2026-91722 | Use after free in Input |
| CVE-2026-91723 | Race condition in WebAppInstalls |
| CVE-2026-91724 | Use after free in Input |
| CVE-2026-91725 | Observable discrepancy in CSS |
| CVE-2026-91726 | Out of bounds read in WebGL |
| CVE-2026-91727 | Incorrect reference resolution in Extensions |
| CVE-2026-91728 | Integer overflow in V8 |
| CVE-2026-91729 | Use after free in DigitalCredentials |
| CVE-2026-91730 | Incomplete cleanup in GetUserMedia |
| CVE-2026-91731 | Type confusion in Compositing |
| CVE-2026-91732 | Missing authorization in AppManifest |
| CVE-2026-91733 | Improper state validation in Skia |
| CVE-2026-91734 | Incorrect authorization in Core |
| CVE-2026-91735 | Incorrect authorization in WebUI |
| CVE-2026-91736 | Use after free in DOM |
| CVE-2026-91737 | Use after free in PDF |
| CVE-2026-91738 | Improper input validation in ANGLE |
| CVE-2026-91739 | Missing authorization in Transactions Platform |
| CVE-2026-91740 | Uninitialized resource in Skia |
| CVE-2026-91741 | Type confusion in CacheStorage |
| CVE-2026-91742 | Confused deputy in PriceTracking |
| CVE-2026-91743 | Race condition in Core |
| CVE-2026-91744 | Race condition in PlatformIntegration |
| CVE-2026-91745 | Use after free in V8 |
| CVE-2026-91746 | Integer overflow in Compositing |
| CVE-2026-91747 | Use after free in Skia |
| CVE-2026-91748 | Race condition in Extensions |
| CVE-2026-91749 | Use after free in Workers |
| CVE-2026-93372 | Buffer overflow in WebGL |
| CVE-2026-93373 | Use after free in Extensions |
| CVE-2026-93374 | Use after free in Dawn |
| CVE-2026-93375 | Incorrect reference resolution in Tracing |
| CVE-2026-93376 | Out of bounds read in DataTransfer |
| CVE-2026-93377 | Type confusion in V8 |
| CVE-2026-93378 | Missing authorization in Storage |
| CVE-2026-93379 | Incorrect authorization in ORB |
| CVE-2026-93380 | Race condition in FileSystem |
| CVE-2026-93381 | Buffer overflow in PDFium |
| CVE-2026-93382 | Use after free in PDFium |
| CVE-2026-93383 | Information leak in Permissions |
| CVE-2026-93384 | Server-side request forgery in Omnibox |
| CVE-2026-93385 | Information leak in Paint |
| CVE-2026-93386 | UI misrepresentation in WebAppInstalls |
| CVE-2026-93387 | Improper state validation in Skia |
| CVE-2026-95274 | Improper output encoding in DevTools |
| CVE-2026-95275 | Incorrect reference resolution in MediaStream |
| CVE-2026-95276 | Improper input validation in Themes |
| CVE-2026-95277 | Use after free in Views |
| CVE-2026-95278 | Missing authorization in WakeLock |
| CVE-2026-95279 | UI misrepresentation in Omnibox |
| CVE-2026-95280 | Race condition in V8 |
| CVE-2026-95281 | Buffer overflow in ANGLE |
| CVE-2026-95282 | Use after free in Platform |
| CVE-2026-95283 | Buffer overflow in Tint |
| CVE-2026-95284 | Buffer overflow in ANGLE |
| CVE-2026-95285 | Missing authorization in WebView |
| CVE-2026-95286 | Type confusion in Bindings |
| CVE-2026-95287 | Missing authorization in Navigation |
| CVE-2026-95288 | UI misrepresentation in Mobile |
| CVE-2026-95289 | Incorrect authorization in Scroll |
| CVE-2026-95290 | Missing authorization in NFC |
| CVE-2026-95291 | UI misrepresentation in SecurityIndicators |
| CVE-2026-95292 | Incorrect authorization in Safebrowsing |
| CVE-2026-95293 | Uninitialized resource in GPU |
| CVE-2026-95294 | UI misrepresentation in Browser |
| CVE-2026-95295 | Information leak in Mobile |
| CVE-2026-95296 | Missing authorization in Core |
| CVE-2026-95297 | Missing authorization in Contextual Tasks |
| CVE-2026-95298 | Use after free in Browser |
| CVE-2026-95299 | Use after free in GPU |
| CVE-2026-95300 | Missing authorization in DevTools |
| CVE-2026-95301 | Missing authorization in Extensions |
| CVE-2026-95302 | Incorrect authorization in WebAPKs |
| CVE-2026-95303 | Incomplete cleanup in SmartCard |
| CVE-2026-95304 | Out of bounds write in V8 |
| CVE-2026-95305 | UI misrepresentation in Chromoting |
| CVE-2026-95306 | Type confusion in V8 |
| CVE-2026-95307 | UI misrepresentation in ExtensionsMenu |
| CVE-2026-95308 | Integer overflow in Metrics |
| CVE-2026-95309 | UI misrepresentation in Mobile |
| CVE-2026-95310 | Use after free in AdFilter |
| CVE-2026-95311 | Free of non-heap memory in Fonts |
| CVE-2026-95312 | Information leak in Passwords |
| CVE-2026-95313 | Use after free in Fullscreen |
| CVE-2026-95314 | Incorrect authorization in HID |
| CVE-2026-95315 | Use after free in Aura |
| CVE-2026-95316 | Unchecked return value in Performance |
| CVE-2026-95317 | Incorrect authorization in MediaCapture |
| CVE-2026-95318 | Buffer overflow in Video |
| CVE-2026-95319 | Use after free in Printing |
| CVE-2026-95320 | Missing authorization in Navigation |
| CVE-2026-95321 | UI misrepresentation in Payments |
| CVE-2026-95322 | Out of bounds write in GPU |
| CVE-2026-95323 | UI misrepresentation in Chromium |
| CVE-2026-95324 | Uninitialized resource in GPU |
| CVE-2026-95325 | Use after free in ANGLE |
| CVE-2026-95326 | Incomplete cleanup in Bluetooth |
| CVE-2026-95327 | Information leak in Networking |
| CVE-2026-95328 | Confused deputy in Mobile |
| CVE-2026-95329 | Out of bounds write in WebGL |
| CVE-2026-95330 | Improper state validation in Downloads |
| CVE-2026-95331 | Out of bounds write in ANGLE |
| CVE-2026-95332 | Use of uninitialized variable in Tint |
| CVE-2026-95333 | Use after free in Metrics |
| CVE-2026-95334 | Incorrect reference resolution in WebProtect |
| CVE-2026-95335 | Use after free in HID |
| CVE-2026-95336 | Information leak in Transactions Platform |
| CVE-2026-95337 | UI misrepresentation in Messages |
| CVE-2026-95338 | Use after free in PDFium |
| CVE-2026-95339 | Use after free in ServiceWorker |
| CVE-2026-95340 | Incorrect authorization in PictureInPicture |
| CVE-2026-95341 | Improper input validation in Desktop |
| CVE-2026-95342 | Missing authorization in V8 |
| CVE-2026-95343 | Use after free in WebAudio |
| CVE-2026-95344 | Race condition in DevTools |
| CVE-2026-95345 | Use after free in Actor |
| CVE-2026-95346 | UI misrepresentation in Chromoting |
| CVE-2026-95347 | Use after free in Updater |
| CVE-2026-95348 | Use after free in Bluetooth |
| CVE-2026-95349 | Buffer overflow in WebGL |
| CVE-2026-95350 | Buffer overflow in ANGLE |
| CVE-2026-95351 | Use after free in Views |
| CVE-2026-95352 | Incorrect authorization in DevTools |
| CVE-2026-95353 | Use after free in Bindings |
| CVE-2026-95354 | Use after free in Verifier |
| CVE-2026-95355 | Incorrect authorization in Navigation |
| CVE-2026-95356 | Use after free in WindowDialog |
| CVE-2026-95357 | Out of bounds write in GPU |
| CVE-2026-95358 | Incorrect authorization in Mobile |
| CVE-2026-95359 | Uninitialized resource in GPU |
| CVE-2026-95360 | Race condition in Editing |
| CVE-2026-95361 | Confused deputy in DevTools |
| CVE-2026-95362 | Cross-site request forgery in DevTools |
| CVE-2026-95363 | UI misrepresentation in FileSystem |
| CVE-2026-95364 | Improper input validation in Passwords |
| CVE-2026-95365 | Type confusion in IndexedDB |
| CVE-2026-95366 | Use of released resource in Core |
| CVE-2026-95367 | Information leak in DataTransfer |
| CVE-2026-95368 | Incorrect authorization in DevTools |
| CVE-2026-95369 | Inappropriate implementation in XML |
| CVE-2026-95370 | Inappropriate implementation in NFC |
| CVE-2026-95371 | Missing authorization in Views |
| CVE-2026-95372 | Use after free in Chromecast |
| CVE-2026-95373 | Use after free in DevTools |
| CVE-2026-95374 | Incorrect authorization in Network |
| CVE-2026-95375 | Incorrect authorization in BrowserTag |
| CVE-2026-95376 | Externally controlled reference in DevTools |
| CVE-2026-95380 | Type confusion in V8 |
| CVE-2026-95381 | Improper input validation in Printing |
| CVE-2026-95382 | Improper input validation in Auth |
| CVE-2026-95384 | Race condition in Transactions Platform |
| CVE-2026-95385 | Inappropriate implementation in PlatformIntegration |
| CVE-2026-102299 | Type confusion in V8 |
| CVE-2026-102300 | Uninitialized resource in WebGPU |
| CVE-2026-102301 | Out of bounds write in GPU |
| CVE-2026-102302 | Buffer overflow in V8 |
| CVE-2026-102303 | Uninitialized resource in GPU |
| CVE-2026-102304 | Use after free in Passwords |
| CVE-2026-102305 | UI misrepresentation in SignIn |
| CVE-2026-102306 | Use after free in Bluetooth |
| CVE-2026-102307 | Uninitialized resource in Dawn |
| CVE-2026-102308 | Use after free in Views |
| CVE-2026-102309 | Use after free in FullScreen |
| CVE-2026-102310 | Missing authorization in Payments |
| CVE-2026-102311 | Uninitialized resource in GPU |
| CVE-2026-102312 | UI misrepresentation in Omnibox |
| CVE-2026-102313 | Uninitialized resource in ANGLE |
| CVE-2026-102314 | UI misrepresentation in TabStrip |
| CVE-2026-102315 | Uninitialized resource in Media |
| CVE-2026-102316 | Use after free in Views |
| CVE-2026-102317 | Improper privilege management in Mojo |
| CVE-2026-102318 | Out of bounds read in WebGL |
| CVE-2026-102319 | Uninitialized resource in GPU |
| CVE-2026-102320 | Missing authorization in CORS |
| CVE-2026-102321 | Type confusion in V8 |
| CVE-2026-102323 | Type confusion in V8 |
| CVE-2026-102324 | Use after free in PictureInPicture |
| CVE-2026-102325 | Uninitialized resource in Skia |
| CVE-2026-102326 | Type confusion in V8 |
| CVE-2026-102327 | Incorrect authorization in WebView |
| CVE-2026-102328 | Type confusion in V8 |
| CVE-2026-102329 | Cross-site scripting in WebUI |
| CVE-2026-102330 | Incorrect authorization in SiteIsolation |
| CVE-2026-102331 | Buffer overflow in ANGLE |
| CVE-2026-106185 | Improper input validation in Viz |
| CVE-2026-106196 | Missing authorization in Navigation |
| CVE-2026-106244 | Incorrect authorization in Permissions |
| CVE-2026-106393 | Use after free in Storage |
| CVE-2026-106401 | Out of bounds write in Media |
| CVE-2026-106404 | Incorrect authorization in FontAccess |
| CVE-2026-106408 | Protection mechanism failure in Mobile |
| CVE-2026-106414 | Improper input validation in Mobile |
| CVE-2026-106426 | Race condition in Fonts |
Product Status
| Versions | Affected | Unaffected |
|---|---|---|
| Prisma Browser | < 152.8.5.83 | >= 155.16.5.40 |
Required Configuration for Exposure
No special configuration is required to be affected by this issue.
Severity: HIGH, Suggested Urgency: MODERATE
CVSS-BT: 7.7 / CVSS-B: 9.4 (CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/AU:N/R:U/V:D/RE:M/U:Amber)
Exploitation Status
Palo Alto Networks is not aware of any malicious exploitation of this issue.
Solution
| CVE | Prisma Browser |
|---|---|
| CVE-2026-85042 | 152.8.5.83 |
| CVE-2026-85043 | 152.8.5.83 |
| CVE-2026-85044 | 152.8.5.83 |
| CVE-2026-85045 | 152.8.5.83 |
| CVE-2026-85046 | 152.8.5.83 |
| CVE-2026-85047 | 152.8.5.83 |
| CVE-2026-85048 | 152.8.5.83 |
| CVE-2026-85049 | 152.8.5.83 |
| CVE-2026-85050 | 152.8.5.83 |
| CVE-2026-85051 | 152.8.5.83 |
| CVE-2026-85052 | 152.8.5.83 |
| CVE-2026-85053 | 152.8.5.83 |
| CVE-2026-87429 | 153.3.3.37 |
| CVE-2026-87430 | 153.3.3.37 |
| CVE-2026-87431 | 153.3.3.37 |
| CVE-2026-87432 | 153.3.3.37 |
| CVE-2026-87433 | 153.3.3.37 |
| CVE-2026-87434 | 153.3.3.37 |
| CVE-2026-87435 | 153.3.3.37 |
| CVE-2026-87436 | 153.3.3.37 |
| CVE-2026-87437 | 153.3.3.37 |
| CVE-2026-87438 | 153.3.3.37 |
| CVE-2026-87439 | 153.3.3.37 |
| CVE-2026-87440 | 153.3.3.37 |
| CVE-2026-87441 | 153.3.3.37 |
| CVE-2026-87442 | 153.3.3.37 |
| CVE-2026-87443 | 153.3.3.37 |
| CVE-2026-87444 | 153.3.3.37 |
| CVE-2026-87445 | 153.3.3.37 |
| CVE-2026-87446 | 153.3.3.37 |
| CVE-2026-87447 | 153.3.3.37 |
| CVE-2026-87448 | 153.3.3.37 |
| CVE-2026-87449 | 153.3.3.37 |
| CVE-2026-87450 | 153.3.3.37 |
| CVE-2026-87451 | 153.3.3.37 |
| CVE-2026-87452 | 153.3.3.37 |
| CVE-2026-87453 | 153.3.3.37 |
| CVE-2026-87454 | 153.3.3.37 |
| CVE-2026-87455 | 153.3.3.37 |
| CVE-2026-87456 | 153.3.3.37 |
| CVE-2026-87457 | 153.3.3.37 |
| CVE-2026-87458 | 153.3.3.37 |
| CVE-2026-87459 | 153.3.3.37 |
| CVE-2026-87460 | 153.3.3.37 |
| CVE-2026-87461 | 153.3.3.37 |
| CVE-2026-87462 | 153.3.3.37 |
| CVE-2026-87463 | 153.3.3.37 |
| CVE-2026-87464 | 153.3.3.37 |
| CVE-2026-87465 | 153.3.3.37 |
| CVE-2026-87466 | 153.3.3.37 |
| CVE-2026-87467 | 153.3.3.37 |
| CVE-2026-87468 | 153.3.3.37 |
| CVE-2026-87469 | 153.3.3.37 |
| CVE-2026-87470 | 153.3.3.37 |
| CVE-2026-87471 | 153.3.3.37 |
| CVE-2026-87472 | 153.3.3.37 |
| CVE-2026-87473 | 153.3.3.37 |
| CVE-2026-87474 | 153.3.3.37 |
| CVE-2026-87475 | 153.3.3.37 |
| CVE-2026-87476 | 153.3.3.37 |
| CVE-2026-87477 | 153.3.3.37 |
| CVE-2026-87478 | 153.3.3.37 |
| CVE-2026-87479 | 153.3.3.37 |
| CVE-2026-87480 | 153.3.3.37 |
| CVE-2026-87481 | 153.3.3.37 |
| CVE-2026-87482 | 153.3.3.37 |
| CVE-2026-87483 | 153.3.3.37 |
| CVE-2026-87484 | 153.3.3.37 |
| CVE-2026-87485 | 153.3.3.37 |
| CVE-2026-87486 | 153.3.3.37 |
| CVE-2026-87487 | 153.3.3.37 |
| CVE-2026-87488 | 153.3.3.37 |
| CVE-2026-87489 | 153.3.3.37 |
| CVE-2026-87490 | 153.3.3.37 |
| CVE-2026-87491 | 153.3.3.37 |
| CVE-2026-87492 | 153.3.3.37 |
| CVE-2026-87493 | 153.3.3.37 |
| CVE-2026-87494 | 153.3.3.37 |
| CVE-2026-87495 | 153.3.3.37 |
| CVE-2026-87496 | 153.3.3.37 |
| CVE-2026-87497 | 153.3.3.37 |
| CVE-2026-87498 | 153.3.3.37 |
| CVE-2026-87499 | 153.3.3.37 |
| CVE-2026-87500 | 153.3.3.37 |
| CVE-2026-87501 | 153.3.3.37 |
| CVE-2026-87502 | 153.3.3.37 |
| CVE-2026-87503 | 153.3.3.37 |
| CVE-2026-87504 | 153.3.3.37 |
| CVE-2026-87505 | 153.3.3.37 |
| CVE-2026-87506 | 153.3.3.37 |
| CVE-2026-87507 | 153.3.3.37 |
| CVE-2026-87508 | 153.3.3.37 |
| CVE-2026-87509 | 153.3.3.37 |
| CVE-2026-87510 | 153.3.3.37 |
| CVE-2026-87511 | 153.3.3.37 |
| CVE-2026-87512 | 153.3.3.37 |
| CVE-2026-87513 | 153.3.3.37 |
| CVE-2026-87514 | 153.3.3.37 |
| CVE-2026-87515 | 153.3.3.37 |
| CVE-2026-87516 | 153.3.3.37 |
| CVE-2026-87517 | 153.3.3.37 |
| CVE-2026-87518 | 153.3.3.37 |
| CVE-2026-87519 | 153.3.3.37 |
| CVE-2026-87520 | 153.3.3.37 |
| CVE-2026-87521 | 153.3.3.37 |
| CVE-2026-87522 | 153.3.3.37 |
| CVE-2026-87523 | 153.3.3.37 |
| CVE-2026-87524 | 153.3.3.37 |
| CVE-2026-87525 | 153.3.3.37 |
| CVE-2026-87526 | 153.3.3.37 |
| CVE-2026-87527 | 153.3.3.37 |
| CVE-2026-87528 | 153.3.3.37 |
| CVE-2026-87529 | 153.3.3.37 |
| CVE-2026-87530 | 153.3.3.37 |
| CVE-2026-87531 | 153.3.3.37 |
| CVE-2026-87532 | 153.3.3.37 |
| CVE-2026-87533 | 153.3.3.37 |
| CVE-2026-87534 | 153.3.3.37 |
| CVE-2026-87535 | 153.3.3.37 |
| CVE-2026-87536 | 153.3.3.37 |
| CVE-2026-87537 | 153.3.3.37 |
| CVE-2026-87538 | 153.3.3.37 |
| CVE-2026-87539 | 153.3.3.37 |
| CVE-2026-87540 | 153.3.3.37 |
| CVE-2026-87541 | 153.3.3.37 |
| CVE-2026-87542 | 153.3.3.37 |
| CVE-2026-87543 | 153.3.3.37 |
| CVE-2026-87544 | 153.3.3.37 |
| CVE-2026-87545 | 153.3.3.37 |
| CVE-2026-87546 | 153.3.3.37 |
| CVE-2026-87547 | 153.3.3.37 |
| CVE-2026-87548 | 153.3.3.37 |
| CVE-2026-87549 | 153.3.3.37 |
| CVE-2026-87550 | 153.3.3.37 |
| CVE-2026-87551 | 153.3.3.37 |
| CVE-2026-87552 | 153.3.3.37 |
| CVE-2026-87553 | 153.3.3.37 |
| CVE-2026-87554 | 153.3.3.37 |
| CVE-2026-87555 | 153.3.3.37 |
| CVE-2026-87556 | 153.3.3.37 |
| CVE-2026-87557 | 153.3.3.37 |
| CVE-2026-87558 | 153.3.3.37 |
| CVE-2026-87559 | 153.3.3.37 |
| CVE-2026-87560 | 153.3.3.37 |
| CVE-2026-87561 | 153.3.3.37 |
| CVE-2026-87562 | 153.3.3.37 |
| CVE-2026-87563 | 153.3.3.37 |
| CVE-2026-87564 | 153.3.3.37 |
| CVE-2026-87565 | 153.3.3.37 |
| CVE-2026-87566 | 153.3.3.37 |
| CVE-2026-87567 | 153.3.3.37 |
| CVE-2026-87568 | 153.3.3.37 |
| CVE-2026-87569 | 153.3.3.37 |
| CVE-2026-87570 | 153.3.3.37 |
| CVE-2026-87571 | 153.3.3.37 |
| CVE-2026-87572 | 153.3.3.37 |
| CVE-2026-87573 | 153.3.3.37 |
| CVE-2026-87574 | 153.3.3.37 |
| CVE-2026-87575 | 153.3.3.37 |
| CVE-2026-87576 | 153.3.3.37 |
| CVE-2026-87577 | 153.3.3.37 |
| CVE-2026-87578 | 153.3.3.37 |
| CVE-2026-87579 | 153.3.3.37 |
| CVE-2026-87580 | 153.3.3.37 |
| CVE-2026-87581 | 153.3.3.37 |
| CVE-2026-87582 | 153.3.3.37 |
| CVE-2026-87583 | 153.3.3.37 |
| CVE-2026-87584 | 153.3.3.37 |
| CVE-2026-87585 | 153.3.3.37 |
| CVE-2026-87586 | 153.3.3.37 |
| CVE-2026-87587 | 153.3.3.37 |
| CVE-2026-87588 | 153.3.3.37 |
| CVE-2026-87589 | 153.3.3.37 |
| CVE-2026-87590 | 153.3.3.37 |
| CVE-2026-87591 | 153.3.3.37 |
| CVE-2026-87592 | 153.3.3.37 |
| CVE-2026-87593 | 153.3.3.37 |
| CVE-2026-87594 | 153.3.3.37 |
| CVE-2026-87595 | 153.3.3.37 |
| CVE-2026-87596 | 153.3.3.37 |
| CVE-2026-87597 | 153.3.3.37 |
| CVE-2026-87598 | 153.3.3.37 |
| CVE-2026-87599 | 153.3.3.37 |
| CVE-2026-87600 | 153.3.3.37 |
| CVE-2026-87601 | 153.3.3.37 |
| CVE-2026-87602 | 153.3.3.37 |
| CVE-2026-87603 | 153.3.3.37 |
| CVE-2026-87604 | 153.3.3.37 |
| CVE-2026-87605 | 153.3.3.37 |
| CVE-2026-87606 | 153.3.3.37 |
| CVE-2026-87607 | 153.3.3.37 |
| CVE-2026-87608 | 153.3.3.37 |
| CVE-2026-87609 | 153.3.3.37 |
| CVE-2026-87610 | 153.3.3.37 |
| CVE-2026-87611 | 153.3.3.37 |
| CVE-2026-87612 | 153.3.3.37 |
| CVE-2026-87613 | 153.3.3.37 |
| CVE-2026-87614 | 153.3.3.37 |
| CVE-2026-87615 | 153.3.3.37 |
| CVE-2026-87616 | 153.3.3.37 |
| CVE-2026-87617 | 153.3.3.37 |
| CVE-2026-87618 | 153.3.3.37 |
| CVE-2026-87619 | 153.3.3.37 |
| CVE-2026-87620 | 153.3.3.37 |
| CVE-2026-87621 | 153.3.3.37 |
| CVE-2026-87622 | 153.3.3.37 |
| CVE-2026-87623 | 153.3.3.37 |
| CVE-2026-87624 | 153.3.3.37 |
| CVE-2026-87625 | 153.3.3.37 |
| CVE-2026-87626 | 153.3.3.37 |
| CVE-2026-87627 | 153.3.3.37 |
| CVE-2026-87628 | 153.3.3.37 |
| CVE-2026-87629 | 153.3.3.37 |
| CVE-2026-87630 | 153.3.3.37 |
| CVE-2026-87631 | 153.3.3.37 |
| CVE-2026-87632 | 153.3.3.37 |
| CVE-2026-87633 | 153.3.3.37 |
| CVE-2026-87634 | 153.3.3.37 |
| CVE-2026-87635 | 153.3.3.37 |
| CVE-2026-87636 | 153.3.3.37 |
| CVE-2026-87637 | 153.3.3.37 |
| CVE-2026-87638 | 153.3.3.37 |
| CVE-2026-87639 | 153.3.3.37 |
| CVE-2026-87640 | 153.3.3.37 |
| CVE-2026-87641 | 153.3.3.37 |
| CVE-2026-87642 | 153.3.3.37 |
| CVE-2026-87643 | 153.3.3.37 |
| CVE-2026-87644 | 153.3.3.37 |
| CVE-2026-87645 | 153.3.3.37 |
| CVE-2026-87646 | 153.3.3.37 |
| CVE-2026-87647 | 153.3.3.37 |
| CVE-2026-87648 | 153.3.3.37 |
| CVE-2026-87649 | 153.3.3.37 |
| CVE-2026-87650 | 153.3.3.37 |
| CVE-2026-87651 | 153.3.3.37 |
| CVE-2026-87652 | 153.3.3.37 |
| CVE-2026-87653 | 153.3.3.37 |
| CVE-2026-87654 | 153.3.3.37 |
| CVE-2026-87655 | 153.3.3.37 |
| CVE-2026-87656 | 153.3.3.37 |
| CVE-2026-87657 | 153.3.3.37 |
| CVE-2026-87658 | 153.3.3.37 |
| CVE-2026-91708 | 153.3.4.48 |
| CVE-2026-91709 | 153.3.4.48 |
| CVE-2026-91710 | 153.3.4.48 |
| CVE-2026-91711 | 153.3.4.48 |
| CVE-2026-91712 | 153.3.4.48 |
| CVE-2026-91713 | 153.3.4.48 |
| CVE-2026-91714 | 153.3.4.48 |
| CVE-2026-91715 | 153.3.4.48 |
| CVE-2026-91716 | 153.3.4.48 |
| CVE-2026-91717 | 153.3.4.48 |
| CVE-2026-91718 | 153.3.4.48 |
| CVE-2026-91719 | 153.3.4.48 |
| CVE-2026-91720 | 153.3.4.48 |
| CVE-2026-91721 | 153.3.4.48 |
| CVE-2026-91722 | 153.3.4.48 |
| CVE-2026-91723 | 153.3.4.48 |
| CVE-2026-91724 | 153.3.4.48 |
| CVE-2026-91725 | 153.3.4.48 |
| CVE-2026-91726 | 153.3.4.48 |
| CVE-2026-91727 | 153.3.4.48 |
| CVE-2026-91728 | 153.3.4.48 |
| CVE-2026-91729 | 153.3.4.48 |
| CVE-2026-91730 | 153.3.4.48 |
| CVE-2026-91731 | 153.3.4.48 |
| CVE-2026-91732 | 153.3.4.48 |
| CVE-2026-91733 | 153.3.4.48 |
| CVE-2026-91734 | 153.3.4.48 |
| CVE-2026-91735 | 153.3.4.48 |
| CVE-2026-91736 | 153.3.4.48 |
| CVE-2026-91737 | 153.3.4.48 |
| CVE-2026-91738 | 153.3.4.48 |
| CVE-2026-91739 | 153.3.4.48 |
| CVE-2026-91740 | 153.3.4.48 |
| CVE-2026-91741 | 153.3.4.48 |
| CVE-2026-91742 | 153.3.4.48 |
| CVE-2026-91743 | 153.3.4.48 |
| CVE-2026-91744 | 153.3.4.48 |
| CVE-2026-91745 | 153.3.4.48 |
| CVE-2026-91746 | 153.3.4.48 |
| CVE-2026-91747 | 153.3.4.48 |
| CVE-2026-91748 | 153.3.4.48 |
| CVE-2026-91749 | 153.3.4.48 |
| CVE-2026-93372 | 153.3.5.53 |
| CVE-2026-93373 | 153.3.5.53 |
| CVE-2026-93374 | 153.3.5.53 |
| CVE-2026-93375 | 153.3.5.53 |
| CVE-2026-93376 | 153.3.5.53 |
| CVE-2026-93377 | 153.3.5.53 |
| CVE-2026-93378 | 153.3.5.53 |
| CVE-2026-93379 | 153.3.5.53 |
| CVE-2026-93380 | 153.3.5.53 |
| CVE-2026-93381 | 153.3.5.53 |
| CVE-2026-93382 | 153.3.5.53 |
| CVE-2026-93383 | 153.3.5.53 |
| CVE-2026-93384 | 153.3.5.53 |
| CVE-2026-93385 | 153.3.5.53 |
| CVE-2026-93386 | 153.3.5.53 |
| CVE-2026-93387 | 153.3.5.53 |
| CVE-2026-95274 | 154.10.4.58 |
| CVE-2026-95275 | 154.10.4.58 |
| CVE-2026-95276 | 154.10.4.58 |
| CVE-2026-95277 | 154.10.4.58 |
| CVE-2026-95278 | 154.10.4.58 |
| CVE-2026-95279 | 154.10.4.58 |
| CVE-2026-95280 | 154.10.4.58 |
| CVE-2026-95281 | 154.10.4.58 |
| CVE-2026-95282 | 154.10.4.58 |
| CVE-2026-95283 | 154.10.4.58 |
| CVE-2026-95284 | 154.10.4.58 |
| CVE-2026-95285 | 154.10.4.58 |
| CVE-2026-95286 | 154.10.4.58 |
| CVE-2026-95287 | 154.10.4.58 |
| CVE-2026-95288 | 154.10.4.58 |
| CVE-2026-95289 | 154.10.4.58 |
| CVE-2026-95290 | 154.10.4.58 |
| CVE-2026-95291 | 154.10.4.58 |
| CVE-2026-95292 | 154.10.4.58 |
| CVE-2026-95293 | 154.10.4.58 |
| CVE-2026-95294 | 154.10.4.58 |
| CVE-2026-95295 | 154.10.4.58 |
| CVE-2026-95296 | 154.10.4.58 |
| CVE-2026-95297 | 154.10.4.58 |
| CVE-2026-95298 | 154.10.4.58 |
| CVE-2026-95299 | 154.10.4.58 |
| CVE-2026-95300 | 154.10.4.58 |
| CVE-2026-95301 | 154.10.4.58 |
| CVE-2026-95302 | 154.10.4.58 |
| CVE-2026-95303 | 154.10.4.58 |
| CVE-2026-95304 | 154.10.4.58 |
| CVE-2026-95305 | 154.10.4.58 |
| CVE-2026-95306 | 154.10.4.58 |
| CVE-2026-95307 | 154.10.4.58 |
| CVE-2026-95308 | 154.10.4.58 |
| CVE-2026-95309 | 154.10.4.58 |
| CVE-2026-95310 | 154.10.4.58 |
| CVE-2026-95311 | 154.10.4.58 |
| CVE-2026-95312 | 154.10.4.58 |
| CVE-2026-95313 | 154.10.4.58 |
| CVE-2026-95314 | 154.10.4.58 |
| CVE-2026-95315 | 154.10.4.58 |
| CVE-2026-95316 | 154.10.4.58 |
| CVE-2026-95317 | 154.10.4.58 |
| CVE-2026-95318 | 154.10.4.58 |
| CVE-2026-95319 | 154.10.4.58 |
| CVE-2026-95320 | 154.10.4.58 |
| CVE-2026-95321 | 154.10.4.58 |
| CVE-2026-95322 | 154.10.4.58 |
| CVE-2026-95323 | 154.10.4.58 |
| CVE-2026-95324 | 154.10.4.58 |
| CVE-2026-95325 | 154.10.4.58 |
| CVE-2026-95326 | 154.10.4.58 |
| CVE-2026-95327 | 154.10.4.58 |
| CVE-2026-95328 | 154.10.4.58 |
| CVE-2026-95329 | 154.10.4.58 |
| CVE-2026-95330 | 154.10.4.58 |
| CVE-2026-95331 | 154.10.4.58 |
| CVE-2026-95332 | 154.10.4.58 |
| CVE-2026-95333 | 154.10.4.58 |
| CVE-2026-95334 | 154.10.4.58 |
| CVE-2026-95335 | 154.10.4.58 |
| CVE-2026-95336 | 154.10.4.58 |
| CVE-2026-95337 | 154.10.4.58 |
| CVE-2026-95338 | 154.10.4.58 |
| CVE-2026-95339 | 154.10.4.58 |
| CVE-2026-95340 | 154.10.4.58 |
| CVE-2026-95341 | 154.10.4.58 |
| CVE-2026-95342 | 154.10.4.58 |
| CVE-2026-95343 | 154.10.4.58 |
| CVE-2026-95344 | 154.10.4.58 |
| CVE-2026-95345 | 154.10.4.58 |
| CVE-2026-95346 | 154.10.4.58 |
| CVE-2026-95347 | 154.10.4.58 |
| CVE-2026-95348 | 154.10.4.58 |
| CVE-2026-95349 | 154.10.4.58 |
| CVE-2026-95350 | 154.10.4.58 |
| CVE-2026-95351 | 154.10.4.58 |
| CVE-2026-95352 | 154.10.4.58 |
| CVE-2026-95353 | 154.10.4.58 |
| CVE-2026-95354 | 154.10.4.58 |
| CVE-2026-95355 | 154.10.4.58 |
| CVE-2026-95356 | 154.10.4.58 |
| CVE-2026-95357 | 154.10.4.58 |
| CVE-2026-95358 | 154.10.4.58 |
| CVE-2026-95359 | 154.10.4.58 |
| CVE-2026-95360 | 154.10.4.58 |
| CVE-2026-95361 | 154.10.4.58 |
| CVE-2026-95362 | 154.10.4.58 |
| CVE-2026-95363 | 154.10.4.58 |
| CVE-2026-95364 | 154.10.4.58 |
| CVE-2026-95365 | 154.10.4.58 |
| CVE-2026-95366 | 154.10.4.58 |
| CVE-2026-95367 | 154.10.4.58 |
| CVE-2026-95368 | 154.10.4.58 |
| CVE-2026-95369 | 154.10.4.58 |
| CVE-2026-95370 | 154.10.4.58 |
| CVE-2026-95371 | 154.10.4.58 |
| CVE-2026-95372 | 154.10.4.58 |
| CVE-2026-95373 | 154.10.4.58 |
| CVE-2026-95374 | 154.10.4.58 |
| CVE-2026-95375 | 154.10.4.58 |
| CVE-2026-95376 | 154.10.4.58 |
| CVE-2026-95380 | 154.10.4.58 |
| CVE-2026-95381 | 154.10.4.58 |
| CVE-2026-95382 | 154.10.4.58 |
| CVE-2026-95384 | 154.10.4.58 |
| CVE-2026-95385 | 154.10.4.58 |
| CVE-2026-102299 | 154.10.5.93 |
| CVE-2026-102300 | 154.10.5.93 |
| CVE-2026-102301 | 154.10.5.93 |
| CVE-2026-102302 | 154.10.5.93 |
| CVE-2026-102303 | 154.10.5.93 |
| CVE-2026-102304 | 154.10.5.93 |
| CVE-2026-102305 | 154.10.5.93 |
| CVE-2026-102306 | 154.10.5.93 |
| CVE-2026-102307 | 154.10.5.93 |
| CVE-2026-102308 | 154.10.5.93 |
| CVE-2026-102309 | 154.10.5.93 |
| CVE-2026-102310 | 154.10.5.93 |
| CVE-2026-102311 | 154.10.5.93 |
| CVE-2026-102312 | 154.10.5.93 |
| CVE-2026-102313 | 154.10.5.93 |
| CVE-2026-102314 | 154.10.5.93 |
| CVE-2026-102315 | 154.10.5.93 |
| CVE-2026-102316 | 154.10.5.93 |
| CVE-2026-102317 | 154.10.5.93 |
| CVE-2026-102318 | 154.10.5.93 |
| CVE-2026-102319 | 154.10.5.93 |
| CVE-2026-102320 | 154.10.5.93 |
| CVE-2026-102321 | 154.10.5.93 |
| CVE-2026-102323 | 154.10.5.93 |
| CVE-2026-102324 | 154.10.5.93 |
| CVE-2026-102325 | 154.10.5.93 |
| CVE-2026-102326 | 154.10.5.93 |
| CVE-2026-102327 | 154.10.5.93 |
| CVE-2026-102328 | 154.10.5.93 |
| CVE-2026-102329 | 154.10.5.93 |
| CVE-2026-102330 | 154.10.5.93 |
| CVE-2026-102331 | 154.10.5.93 |
| CVE-2026-106185 | 155.16.5.40 |
| CVE-2026-106196 | 155.16.5.40 |
| CVE-2026-106244 | 155.16.5.40 |
| CVE-2026-106393 | 155.16.5.40 |
| CVE-2026-106401 | 155.16.5.40 |
| CVE-2026-106404 | 155.16.5.40 |
| CVE-2026-106408 | 155.16.5.40 |
| CVE-2026-106414 | 155.16.5.40 |
| CVE-2026-106426 | 155.16.5.40 |
Workarounds and Mitigations
No known workarounds exist for this issue.
CPE Applicability
- cpe:2.3:a:palo_alto_networks:prisma_browser:*:*:*:*:*:*:*:* is vulnerable from (including)155.16.5 and up to (excluding)155.16.5.40
Timeline
Initial Publication