Local Privilege Escalation Vulnerability in Parallels Desktop by Parallels

CVE-2021-34867

What is CVE-2021-34867?

A local privilege escalation vulnerability has been identified in Parallels Desktop, specifically in version 16.1.3-49160. This security issue allows local attackers to escalate their privileges by exploiting a flaw within the Toolgate component. The flaw arises from inadequate validation of user-supplied data, which may lead to uncontrolled memory allocation. To successfully exploit this vulnerability, an attacker must first gain access to execute high-privileged code on the target guest system. By leveraging this vulnerability, attackers can escalate privileges and execute arbitrary code in the context of the hypervisor, posing significant risks to system integrity and data security.

References