CVE-2022-34891

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2022-34891

CVE-2022-34891 affects Parallels Desktop 17.1.1. The flaw is in the updater mechanism where permissions on sensitive files are set incorrectly, enabling a local, low-privilege attacker to escalate to root and execute arbitrary code. Exploitation details or active exploitation are not provided in ...