Local Privilege Escalation in Parallels RAS Client by Parallels

CVE-2026-18262

What is CVE-2026-18262?

A local privilege escalation vulnerability exists within the RAS RDP Backend Service of Parallels RAS Client. This flaw allows attackers with low-privileged access to escalate their privileges to the SYSTEM level. By leveraging this vulnerability, an attacker can execute arbitrary code, significantly compromising the affected system's integrity and security. Proper mitigation strategies should be implemented to address this security concern.

References