CVE-2025-4618CWE-316

CVE-2025-4618

published November 14, 2025

CVSS
4.4
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

A sensitive information disclosure vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to retrieve sensitive data from Prisma Browser.

Browser self-protection should be enabled to mitigate this issue.

The record
Technical detail
CVSS
4.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00093 · 0.5th percentile
Weakness
CWE-316 · Cleartext Storage of Sensitive Information in Memory
Published
2025-11-14T23:15Z
References (1)
https://security.paloaltonetworks.com/CVE-2025-4618 · [email protected]
EPSS history
Timeline
  • 14 NOV 17:53Z
    Prisma Browser: Sensitive Information Disclosure Vulnerability in Prisma Browser
    cvelistv5