Parallels Desktop Information Disclosure Vulnerability (CNVD-2020-46855)

Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in prlhypervisor kext in versions prior to Parallels Desktop 15.1.4 47270. The vulnerability stems from a lack of proper validation of user-supplied data. An attacker could...

PT-2020-14951

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2020-14950

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists...

PT-2020-14942

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The specific...

PT-2020-14949

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists...

Parallels Desktop prl_hypervisor Improper Input Validation Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prlhypervisor...

PT-2020-14943

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

PT-2020-14953

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

PT-2020-14944

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw...

Apple macOS AirPort BrcmNIC Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

Apple macOS High Sierra kext tools elevation of privilege vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems for Mac computers. kext tools is a graphical interface tool for installing drivers. A security vulnerability exists in the kext tools component of Apple macOS High Sierra versions prior to 10.13, which is caused by a logi...

Apple macOS High Sierra kext tools memory corruption vulnerability

Apple macOS High Sierra is a suite of Apple's proprietary operating systems for Mac computers. kext tools is a graphical interface tool for installing drivers. A security vulnerability exists in the kext tools component of Apple macOS High Sierra versions prior to 10.13.4. An attacker can exploit...

CVE-2018-4139

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13827

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading...

Code injection

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading...

CVE-2018-4139

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

CVE-2017-13827

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading...

CVE-2017-13827

CVE-2017-13827—kext tools elevation of privilege (macOS

PT-2018-5594

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.13 Description: The issue involves the kext tools component, allowing attackers to execute arbitrary code in a privileged context via a crafted app that performs kext loading. Recommendations: For macOS versions pri...