Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 39316 Agent. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 39313 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2022-34902

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 39316 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

CVE-2022-34902

Parallels Access 6.5.4 Agent is affected by CVE-2022-34902. The Desktop Control Agent loads Qt plugins from an unsecured location, enabling a local attacker who can run low-privilege code to escalate to SYSTEM and execute arbitrary code. This is a local privilege escalation via an uncontrolled se...

CVE-2022-34901

CVE-2022-34901 affects Parallels Access Agent 6.5.4 (39316). The flaw resides in the Parallels Service, which executes files from an unsecured location, enabling a local attacker who can run low-privileged code to escalate to root and execute arbitrary code. The vulnerability is labeled as a loca...

CVE-2022-34900

CVE-2022-34900 affects Parallels Access Agent 6.5.3 (39313). The Dispatcher service loads an OpenSSL configuration file from an unsecured location, enabling a local attacker who can run low-privileged code to escalate to SYSTEM and execute arbitrary code. Documented by ZDI-22-945 (and related fee...

CVE-2022-34899

CVE-2022-34899 affects Parallels Access 6.5.4 (39316) Agent. A local attacker who can run low-privilege code can abuse a flaw in the Parallels service by using symbolic links to escalate privileges and execute arbitrary code as root. Root-level impact is stated; the flaw is tied to a local privil...

CVE-2022-34892

CVE-2022-34892 affects Parallels Desktop 17.1.1 on macOS. A race-condition in the updater mechanism (due to lack of proper locking when operating on an object) can be exploited by a local attacker who already has low-privilege code execution to escalate to root and execute arbitrary code. The iss...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A security vulnerability exists in Corel Parallels Desktop version 17.1.1 51537, which stems from a vulnerability that allows a local attacker to disclose sensitive information on an affected...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A security vulnerability exists in Corel Parallels Desktop version 17.1.1 that stems from allowing a local attacker to elevate privileges on an affected installation of Parallels Desktop. An...

CVE-2022-34891

CVE-2022-34891 affects Parallels Desktop 17.1.1. The flaw is in the updater mechanism where permissions on sensitive files are set incorrectly, enabling a local, low-privilege attacker to escalate to root and execute arbitrary code. Exploitation details or active exploitation are not provided in ...

CVE-2022-34889

CVE-2022-34889 affects Parallels Desktop 17.1.1 (51537). The vulnerability is in the ACPI virtual device and arises from insufficient validation of user-supplied data, causing a read past the end of an allocated buffer. This enables local attackers who can run high-privilege code on the target gu...

CVE-2021-34986

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 49183. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2021-34986

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 49183. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 49187. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-34986

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 49183. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2021-34986

Parallels Desktop 16.5.0 (49183) contains a local privilege escalation in the Parallels Service. By creating a symbolic link, an attacker who can run low-privileged code can abuse the service to execute a file, escalating to root and executing arbitrary code. This has been disclosed as ZDI-22-385...

USN-5515-1: Linux kernel vulnerabilities

Eric Biederman discovered that the cgroup process migration implementation in the Linux kernel did not perform permission checks correctly in some situations. A local attacker could possibly use this to gain administrative privileges. CVE-2021-4197 Jann Horn discovered that the FUSE file system i...

CVE-2022-34748

A vulnerability has been identified in Simcenter Femap All versions V2022.2. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted XT files. This could allow an attacker to execute code in the context of the current process...

Design/Logic Flaw

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.250, Parasolid V34.1 All versions V34.1.233, Simcenter Femap V2022.1 All versions V2022.1.3, Simcenter Femap V2022.2 All versions V2022.2.2. The affected application contains an out o...