Privilege Escalation Vulnerability in Parallels Desktop by Parallels
CVE-2021-34987

8.2HIGH

Key Information:

Vendor

Parallels

Status
Desktop
Vendor
CVE Published:
15 July 2022

What is CVE-2021-34987?

This vulnerability in Parallels Desktop 16.5.1 pertains to the HDAudio virtual device, where a flaw in the validation of user-supplied data length can be exploited by local attackers. By executing high-privileged code on the guest system, an attacker can manipulate the buffer, leading to privilege escalation and potential execution of arbitrary code within the hypervisor environment.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Desktop 16.5.1 (49187)

References

https://kb.parallels.com/en/125013
x_refsource_MISC
https://www.zerodayinitiative.com/advisories/ZDI-22-386/
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ben McBride
JSON
.