CVE-2025-4617CWE-424

CVE-2025-4617

published November 14, 2025

CVSS
1.1
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the browser.

Browser self-protection should be enabled to mitigate this issue.

The record
Technical detail
CVSS
1.1 · NONE
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-424 · Improper Protection of Alternate Path
Published
2025-11-14T23:15Z
References (1)
https://security.paloaltonetworks.com/CVE-2025-4617 · [email protected]
EPSS history
Timeline
  • 14 NOV 17:51Z
    Prisma Browser: Insufficient Policy Enforcement Vulnerability in Prisma Browser
    cvelistv5