Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability

CVE-2023-27325

What is CVE-2023-27325?

The vulnerability emerges from an improper initialization of environment variables within the Updater service of Parallels Desktop. This flaw allows local attackers, who have already executed low-privileged code on the target system, to escalate their privileges. Once exploited, an attacker can execute arbitrary code with elevated permissions, impacting system integrity and security. The issue highlights the critical need for proper initialization protocols to safeguard against unauthorized access and privilege escalation threats.

References