Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a specific flaw in the virtio-gpu virtual appliance that lacks proper validation of...

CVE-2023-27327: Time-of-check Time-of-use (TOCTOU) Race Condition

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target...

CVE-2023-27328: XML Injection (aka Blind XPath Injection)

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system i...

CVE-2024-32986: Improper Neutralization of Special Elements in Output Used by a Downstream Component

PWAsForFirefox is a tool to install, manage and use Progressive Web Apps PWAs in Mozilla Firefox. Due to improper sanitization of web app properties such as name, description, shortcuts, web apps were able to inject additional lines into XDG Desktop Entries on Linux and AppInfo.ini on...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a local privilege escalation vulnerability in the Updater service...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a local privilege escalation vulnerability in the Parallels service...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from incorrect cryptographic signature validation of the updater, allowing a local attacker to...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a local privilege escalation vulnerability in the Updater service...

CVE-2023-27322: Improper Initialization

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host...

Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Parallels Desktop that originates from a specific flaw in the updater service, which can be abused to move arbitrary files by...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a specific flaw in the updater service that can be abused to move arbitrary files by...

CVE-2023-50228: Improper Verification of Cryptographic Signature

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged...

CVE-2023-50227: Out-of-bounds Write

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction is required to exploit this vulnerability in that the target in a guest syste...

CVE-2023-27323: Time-of-check Time-of-use (TOCTOU) Race Condition

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target hos...

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop Service that stems from a local privilege escalation vulnerability in the Toolgate component...

The vulnerability of the RDP client FreeRDP, related to memory-walking attacks, allows attackers to compromise the integrity of protected information.

The vulnerability of the RDP client FreeRDP relates to memory-walking attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the integrity of the protected information...

The vulnerability of the RDP client FreeRDP, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the RDP client FreeRDP is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

The vulnerability of the freerdp_image_copy function in the RDP client FreeRDP allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the freerdpimagecopy function in the RDP client FreeRDP is related to reading data beyond the memory boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Moderate: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

freerdp: missing offset validation leading to Out-of-Bounds Read in gdi_multi_opaque_rect

A flaw was found in FreeRDP. Looping through multiopaquerect-numRectangles without proper boundary checks can lead to a heap-buffer-overflow, which may result in a crash...