ZDI-23-218: Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
Published Mar 7, 2023
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
Affected Software
1 affected component
Parallels Desktop
Event History
Mar 7, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Mar 24, 2025
Advisory Published
via ZDI·07:01 PM
Frequently Asked Questions
1
What is the severity of ZDI-23-218?
The severity of ZDI-23-218 is high due to its potential for local privilege escalation.
2
How do I fix ZDI-23-218?
To fix ZDI-23-218, users should update to the latest version of Parallels Desktop as soon as it is available.
3
Who is affected by ZDI-23-218?
ZDI-23-218 affects users of Parallels Desktop for Mac.
4
What type of attack is ZDI-23-218 associated with?
ZDI-23-218 is associated with local privilege escalation attacks.
5
Is user interaction required to exploit ZDI-23-218?
Yes, an attacker must first gain the ability to execute low-privileged code on the target system to exploit ZDI-23-218.