Privilege Escalation Vulnerability in Parallels Desktop by Parallels

CVE-2022-34891

What is CVE-2022-34891?

A security vulnerability exists in Parallels Desktop 17.1.1 that allows local attackers to escalate their privileges. This flaw is due to the improper permissions set on sensitive files within the update mechanism of the software. To exploit this vulnerability, an attacker must have the ability to run low-privileged code on the system. Successfully leveraging this vulnerability would enable the attacker to execute arbitrary code with root privileges, posing significant risks to system integrity.

References