Local Privilege Escalation Vulnerability in Parallels RAS Client RDP Backend Service

CVE-2026-18263

What is CVE-2026-18263?

The Parallels RAS Client contains a vulnerability within its RDP Backend Service that allows local attackers to escalate their privileges. This security flaw is triggered when an attacker, having already executed low-privileged code on the affected system, accesses an exposed dangerous function. By exploiting this vulnerability, the attacker can achieve arbitrary code execution with SYSTEM-level privileges, potentially compromising the security and integrity of the system.

References