CVE-2024-34331: Critical severity parallels vulnerability
A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34331?
CVE-2024-34331 has been categorized with a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2024-34331?
To remediate CVE-2024-34331, update to Parallels Desktop for Mac version 19.3.1 or later where the vulnerability has been patched.
What systems are affected by CVE-2024-34331?
CVE-2024-34331 affects Parallels Desktop for Mac versions 19.3.0 and below.
What potential impact does CVE-2024-34331 have?
CVE-2024-34331 can allow attackers to escalate privileges on affected systems, potentially leading to unauthorized access or control.
Is code signing verification important in the context of CVE-2024-34331?
Yes, the lack of code signature verification in Parallels Desktop for Mac is a critical factor contributing to the vulnerability in CVE-2024-34331.