ZDI-23-221: Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-221?
The severity of ZDI-23-221 is classified as a high-risk vulnerability due to its potential to allow local privilege escalation.
How do I fix ZDI-23-221?
To fix ZDI-23-221, ensure that you apply the latest security updates released for Parallels Desktop.
Who is affected by ZDI-23-221?
ZDI-23-221 affects users of Parallels Desktop for Mac who have not implemented the necessary security patches.
What type of attack does ZDI-23-221 enable?
ZDI-23-221 enables local attackers to escalate their privileges on the affected systems.
What must an attacker do to exploit ZDI-23-221?
An attacker must first obtain the ability to execute high-privileged code on the target guest system to exploit ZDI-23-221.