CVE-2021-31428

CVE-2021-31428 affects Parallels Desktop 15.1.5-47309, with the vulnerability located in the IDE virtual device. The issue is a heap-based buffer overflow caused by improper validation of the length of user-supplied data before copying to a fixed-length heap buffer, enabling local privilege escal...

CVE-2021-31428

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-31422

CVE-2021-31422 affects Parallels Desktop 16.1.1-49141. The vulnerability is in the e1000e virtual device, caused by a lack of proper locking when performing operations on an object, enabling a local attacker who already has high-privilege code execution in the guest to escalate privileges and exe...

CVE-2021-31422

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-31428: Heap-based Buffer Overflow

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-31432: Out-of-bounds Read

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31429: Heap-based Buffer Overflow

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-31431: Out-of-bounds Read

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2021-31422: Time-of-check Time-of-use (TOCTOU) Race Condition

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2021-31430: Out-of-bounds Read

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

Oracle VirtualBox LsiLogicSCSI Race Condition Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

PT-2021-19309

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.5-47309 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in orde...

PT-2021-19310

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.5-47309 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest...

PT-2021-19312

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.5-47309 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest...

PT-2021-19308

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.5-47309 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in orde...

PT-2021-19311

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.5-47309 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest...

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

Parallels Desktop IDE Heap-based Buffer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE...

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

Parallels Desktop IDE Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...