PALO ALTO NETWORKS FIXED MULTIPLE PRIVILEGE ESCALATION FLAWS

Summary from the TLDR InfoSec newsletter

Palo Alto Networks fixed seven privilege escalation vulnerabilities in its products, the most severe of which was CVE-2025-4232 (CVSS 7.1), which allows non-administrative macOS users to escalate privileges to root through a wildcard vulnerability in GlobalProtect's log collection feature. The company also patched two authenticated admin command injection flaws in PAN-OS (CVE-2025-4231 and CVE-2025-4230) that enabled authenticated administrators to execute commands as root users. Palo Alto also integrated 11 Chrome security patches and addressed a cache vulnerability in Prisma Access Browser. There were no known active exploits of these vulnerabilities.