Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

CVE-2023-27327

What is CVE-2023-27327?

The Parallels Desktop Toolgate component is affected by a vulnerability that enables local attackers to escalate privileges once high-privileged code is executed on the target guest system. The flaw arises from insufficient locking mechanisms during operations on an object, thereby allowing an attacker to leverage this issue to execute arbitrary code in the context of the current user on the host system. This significant security risk highlights the need for immediate attention and remediation by users of the impacted Parallels Desktop versions.

References