Local Privilege Escalation Vulnerability in Parallels Desktop by Parallels

CVE-2025-0413

What is CVE-2025-0413?

The vulnerability in the Technical Data Reporter component of Parallels Desktop allows local attackers to escalate their privileges. Once an attacker gains low-privileged access to the system, they can create a symbolic link to manipulate permissions of arbitrary files. This can lead to executing code with elevated privileges, granting the attacker extensive control over the system.

References