ZDI-23-217: Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
Published Mar 7, 2023
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
Affected Software
1 affected component
Parallels Desktop
Event History
Mar 7, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Mar 24, 2025
Advisory Published
via ZDI·07:01 PM
Frequently Asked Questions
1
What is the severity of ZDI-23-217?
The severity of ZDI-23-217 is considered to be critical due to its potential for privilege escalation.
2
How do I fix ZDI-23-217?
To fix ZDI-23-217, ensure that you update your Parallels Desktop for Mac to the latest version provided by the vendor.
3
Who is affected by ZDI-23-217?
ZDI-23-217 affects users of Parallels Desktop for Mac who have local access to the system.
4
What does ZDI-23-217 exploit?
ZDI-23-217 exploits a vulnerability in Parallels Desktop that allows local attackers to escalate their privileges.
5
Can ZDI-23-217 be exploited remotely?
No, ZDI-23-217 requires local access to the target system to be exploited.