Privilege Escalation Vulnerability in Parallels Desktop for Mac
CVE-2024-36486
7.8HIGH
What is CVE-2024-36486?
A vulnerability has been identified in the virtual machine archive restoration functionality of Parallels Desktop for Mac. Specifically, when an archived virtual machine is restored, the prl_vmarchiver tool utilizes root privileges to decompress and write files back to their original locations. This process can be exploited by an attacker using a hard link, allowing them to overwrite arbitrary files, which poses a significant risk for privilege escalation within the system.
Affected Version(s)
Parallels Desktop for Mac version 20.1.1 (55740)