{"document":{"category":"csaf_vex","csaf_version":"2.1","notes":[{"category":"summary","text":"Palo Alto Networks PSIRT provided VEX document. This document is autogenerated.","title":"Chromium: Monthly Vulnerability Update (September 2026)"}],"publisher":{"category":"vendor","name":"Palo Alto Networks","namespace":"https://security.paloaltonetworks.com"},"title":"Palo Alto Networks PSIRT provided VEX document: PAN-SA-2026-0012","distribution":{"text":"Copyright © 2024 Palo Alto Networks. All rights reserved.","tlp":{"label":"CLEAR","url":"https://www.first.org/tlp/"}},"tracking":{"current_release_date":"2026-09-18T16:53:22.074Z","generator":{"date":"2026-09-18T16:53:22.074Z","engine":{"name":"Vulnogram","version":"0.1.0-dev"}},"id":"PAN-SA-2026-0012","initial_release_date":"2026-09-09T16:00:00.000Z","revision_history":[{"number":"1","date":"2026-09-09T09:00:00.000Z","summary":"Initial Publication"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"name":"Palo Alto Networks","category":"vendor","branches":[{"name":"Prisma Browser","category":"product_name","branches":[{"category":"product_version_range","name":"vers:generic/Prisma Browser<151.26.5.170","product":{"name":"Palo Alto Networks Prisma Browser","product_id":"PANW-Prisma-Browser-71"}},{"category":"product_version_range","name":"vers:generic/Prisma Browser>=152.8.4.76","product":{"name":"Palo Alto Networks Prisma Browser","product_id":"PANW-Prisma-Browser-72"}}]}]}]},"vulnerabilities":[{"cve":"CVE-2026-76020","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Race condition in V8"}],"references":[{"category":"external","summary":"NVD - CVE-2026-76020","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76020"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Race condition in V8"}]},{"cve":"CVE-2026-76022","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Buffer overflow in Network"}],"references":[{"category":"external","summary":"NVD - CVE-2026-76022","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76022"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Buffer overflow in Network"}]},{"cve":"CVE-2026-76038","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Type confusion in V8"}],"references":[{"category":"external","summary":"NVD - CVE-2026-76038","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76038"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Type confusion in V8"}]},{"cve":"CVE-2026-76046","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Buffer overflow in ANGLE"}],"references":[{"category":"external","summary":"NVD - CVE-2026-76046","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76046"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Buffer overflow in ANGLE"}]},{"cve":"CVE-2026-76047","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Type confusion in V8"}],"references":[{"category":"external","summary":"NVD - CVE-2026-76047","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76047"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Type confusion in V8"}]},{"cve":"CVE-2026-79016","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Observable discrepancy in SVG"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79016","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79016"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Observable discrepancy in SVG"}]},{"cve":"CVE-2026-79032","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Improper input validation in Network"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79032","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79032"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Improper input validation in Network"}]},{"cve":"CVE-2026-79118","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Uninitialized resource in ANGLE"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79118","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79118"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Uninitialized resource in ANGLE"}]},{"cve":"CVE-2026-79195","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Use after free in Script"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79195","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79195"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Use after free in Script"}]},{"cve":"CVE-2026-79282","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Use after free in ANGLE"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79282","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79282"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Use after free in ANGLE"}]},{"cve":"CVE-2026-79286","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Missing authorization in CustomTabs"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79286","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79286"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Missing authorization in CustomTabs"}]},{"cve":"CVE-2026-79290","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Use after free in Aura"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79290","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79290"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Use after free in Aura"}]},{"cve":"CVE-2026-79293","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Information leak in Animation"}],"references":[{"category":"external","summary":"NVD - CVE-2026-79293","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79293"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Information leak in Animation"}]},{"cve":"CVE-2026-84348","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Information leak in MediaCapture"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84348","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84348"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Information leak in MediaCapture"}]},{"cve":"CVE-2026-84350","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Use after free in TabStrip"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84350","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84350"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Use after free in TabStrip"}]},{"cve":"CVE-2026-84351","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Buffer overflow in GPU"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84351","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84351"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Buffer overflow in GPU"}]},{"cve":"CVE-2026-84357","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Improper input validation in Omnibox"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84357","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84357"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Improper input validation in Omnibox"}]},{"cve":"CVE-2026-84358","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Improper privilege management in Downloads"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84358","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84358"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Improper privilege management in Downloads"}]},{"cve":"CVE-2026-84359","product_status":{"fixed":["PANW-Prisma-Browser-72"],"known_affected":["PANW-Prisma-Browser-71"]},"notes":[{"category":"description","text":"Information leak in Skia"}],"references":[{"category":"external","summary":"NVD - CVE-2026-84359","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84359"},{"category":"self","summary":"Palo Alto Networks Security Advisory PAN-SA-2026-0012","url":"https://security.paloaltonetworks.com/PAN-SA-2026-0012"}],"threats":[{"category":"impact","description":"Information leak in Skia"}]}]}