ZDI-CAN-18229: ZDI-23-218: Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
Published Mar 7, 2023
·Updated
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
Affected Software
1 affected component
Parallels Desktop
Event History
Mar 7, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Mar 24, 2025
Advisory Published
via ZDI·07:01 PM
Frequently Asked Questions
1
What is the severity of ZDI-CAN-18229?
The severity of ZDI-CAN-18229 is critical due to its potential to allow local privilege escalation.
2
How do I fix ZDI-CAN-18229?
To fix ZDI-CAN-18229, users should update Parallels Desktop to the latest version that addresses this vulnerability.
3
Who is affected by ZDI-CAN-18229?
ZDI-CAN-18229 affects local users of Parallels Desktop for Mac who can execute low-privileged code.
4
What type of vulnerability is ZDI-CAN-18229?
ZDI-CAN-18229 is a local privilege escalation vulnerability.
5
Can ZDI-CAN-18229 be exploited remotely?
No, ZDI-CAN-18229 requires local access to the system for exploitation.