CVE-2024-36486: High severity parallels vulnerability
A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prlvmarchiver tool decompresses the file and writes the content back to its original location using root privileges. An attacker can exploit this process by using a hard link to write to an arbitrary file, potentially resulting in privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36486?
CVE-2024-36486 is classified as a privilege escalation vulnerability.
How do I fix CVE-2024-36486?
To mitigate CVE-2024-36486, update Parallels Desktop for Mac to version 20.1.2 or later.
What software is affected by CVE-2024-36486?
CVE-2024-36486 affects Parallels Desktop for Mac version 20.1.1 (55740).
What is the impact of CVE-2024-36486?
Exploitation of CVE-2024-36486 allows an attacker to gain elevated privileges on the affected system.
How can I detect if my system is affected by CVE-2024-36486?
You can detect CVE-2024-36486 by checking if Parallels Desktop for Mac is running version 20.1.1 (55740) without the latest updates.