ZDI-23-220: Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-220?
The severity of ZDI-23-220 is considered critical due to its potential for privilege escalation.
How do I fix ZDI-23-220?
To fix ZDI-23-220, apply the latest security updates provided by Parallels for Parallels Desktop for Mac.
Who is affected by ZDI-23-220?
ZDI-23-220 affects all installations of Parallels Desktop for Mac that are not updated to the latest version.
What type of vulnerability is ZDI-23-220?
ZDI-23-220 is classified as a local privilege escalation vulnerability.
What conditions are required to exploit ZDI-23-220?
An attacker must first gain the ability to execute low-privileged code on the target guest system to exploit ZDI-23-220.