ZDI-23-216: Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-216?
ZDI-23-216 has been classified with a moderate severity level due to its potential for local privilege escalation.
How do I fix ZDI-23-216?
To fix ZDI-23-216, users should update Parallels Desktop to the latest available version provided by the vendor.
Who is affected by vulnerability ZDI-23-216?
Vulnerability ZDI-23-216 affects installations of Parallels Desktop for Mac where local attackers can exploit privilege escalation.
What type of attack does ZDI-23-216 facilitate?
ZDI-23-216 facilitates local privilege escalation attacks, allowing attackers to gain elevated permissions on the target system.
Is there a workaround for ZDI-23-216?
Currently, no official workaround is provided for ZDI-23-216, so users are advised to apply the appropriate updates to mitigate the risk.