PT-2020-14944

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw...

PT-2020-14946

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to...

PT-2020-14947

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2020-14953

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order ...

PT-2020-14951

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

PT-2020-14950

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists...

PT-2020-14941

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.2-47123 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

PT-2020-14942

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The specific...

PT-2020-14949

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.4 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists...

PT-2020-14943

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

Parallels Desktop OEMNet Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

Parallels Desktop Networking Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

Parallels Desktop hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the hypervisor...

Parallels Desktop prl_hypervisor Out-Of-Bounds Read Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prlhypervisor...

Parallels Desktop Networking Service Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the prlnapt...

Red Hat libvirt elevation of privilege vulnerability (CNVD-2020-47042)

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. An elevation of privilege vulnerability exists in Red Hat...

QEMU SLiRP Networking Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to execute arbitrary code on affected installations of QEMU. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handling of SLiRP...

Barbervisor: Journey developing a snapshot fuzzer with Intel VT-x

By Cory Duplantis. One of the ways vulnerability researchers find bugs is with fuzzing. At a high level, fuzzing is the process of generating and mutating random inputs for a given target to crash it. In 2017, I started developing a bare metal hypervisor for the purposes of snapshot fuzzing:...

Denial Of Service (DoS)

xen is vulnerable to denial of service DoS. The vulnerability exists as n issue was discovered in Xen through 4.13.x, allowing x86 HVM guest OS users to cause a hypervisor crash. An inverted conditional in x86 HVM guests' dirty video RAM tracking code allows such guests to make Xen de-reference a...