ZDI-CAN-18933: ZDI-23-221: Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-18933?
ZDI-CAN-18933 is classified as a moderate severity vulnerability allowing privilege escalation.
How do I fix ZDI-CAN-18933?
To fix ZDI-CAN-18933, update to the latest version of Parallels Desktop for Mac that addresses this vulnerability.
Who is affected by ZDI-CAN-18933?
ZDI-CAN-18933 affects users of Parallels Desktop for Mac who have not applied the necessary security updates.
Can ZDI-CAN-18933 be exploited remotely?
No, ZDI-CAN-18933 requires local access to the guest system for the attacker to exploit the vulnerability.
What types of attacks are possible with ZDI-CAN-18933?
Exploitation of ZDI-CAN-18933 can lead to privilege escalation for local attackers on affected installations.