ZDI-CAN-19187: ZDI-23-220: Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19187?
ZDI-CAN-19187 is classified as a high severity vulnerability due to its potential for privilege escalation.
How do I fix ZDI-CAN-19187?
To remediate ZDI-CAN-19187, ensure that you update Parallels Desktop to the latest version provided by the vendor.
Who is affected by ZDI-CAN-19187?
ZDI-CAN-19187 affects users of Parallels Desktop for Mac when certain configurations allow local code execution.
What type of vulnerability is ZDI-CAN-19187?
ZDI-CAN-19187 is a local privilege escalation vulnerability that requires local access to the system to exploit.
Can ZDI-CAN-19187 be exploited remotely?
No, ZDI-CAN-19187 can only be exploited by an attacker who has already gained access to low-privileged code on the guest system.