Local Privilege Escalation in Parallels Desktop by Parallels

CVE-2022-34889

What is CVE-2022-34889?

This vulnerability permits local attackers to escalate their privileges on affected Parallels Desktop installations. An attacker must first gain the ability to execute high-privilege code on the targeted guest system for successful exploitation. The flaw resides in the ACPI virtual device, stemming from inadequate validation of user-supplied data, potentially allowing a read past the end of an allocated buffer. Consequently, an attacker might leverage this vulnerability to escalate their privileges, executing arbitrary code within the hypervisor's context.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References