Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

Memory corruption

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17401

CVE-2020-17401 affects Parallels Desktop 15.1.4, with the vulnerability located in the VGA virtual device. The issue is an out-of-bounds read caused by improper validation of user-supplied data, allowing local attackers who can execute high-privilege code on the guest to read past the end of an a...

CVE-2020-17400

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17401

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17397

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17397

CVE-2020-17397 affects Parallels Desktop (notably 15.1.4) where a memory corruption triggered by improper validation of data in network packet handling allows local privilege escalation to the hypervisor context. Exploitation requires high-privilege code execution on the target guest; no public e...

CVE-2020-17395

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17394

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17390

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Vulnerabilities fixed in Xen, Citrix XenServer and Hypervisor

Vulnerabilities have been fixed in Xen, Citrix XenServer and Hypervisor. The vulnerabilities allow a malicious party to cause a denial-of-service DoS or to execute arbitrary code execute arbitrary code under application privileges. -= Citrix Xenserver =- Citrix has released updates to fix the...

Support for Nutanix Clusters on AWS

Nutanix Clusters on AWS runs the core Nutanix HCI stack including Nutanix AOS, AHV, and Prism, along with all Nutanix products and services on bare metal EC2 instances on Amazon Web Services AWS. This allows you to migrate or extend applications from private clouds to AWS easily. Nutanix Clusters...

Parallels Desktop Out-of-Bounds Access Elevation of Privilege Vulnerability (CNVD-2020-46859)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds access elevation of privilege vulnerability exists in the handling of network packets in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of...

Parallels Desktop Out-of-Bounds Read Elevation of Privilege Vulnerability (CNVD-2020-46852)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds read elevation of privilege vulnerability exists in the hypervisor kernel extension in versions prior to Parallels Desktop 15.1.4 47270. The vulnerability stems from a lack of proper validation of...

Parallels Desktop Information Disclosure Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. An information disclosure vulnerability exists in prlhypervisor kext in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability can be exploited to obtain a memory address via a log file, which can be used in...

Parallels Desktop Out-of-Bounds Read Information Disclosure Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds read information disclosure vulnerability exists in the VGA virtual appliance in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of user-supplied...

Parallels Desktop Out-of-Bounds Read Elevation of Privilege Vulnerability (CNVD-2020-46861)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds read elevation of privilege vulnerability exists in prlhypervisor kext in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of user-supplied data. ...

Parallels Desktop Out-of-Bounds Read Information Disclosure Vulnerability (CNVD-2020-46860)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds read information disclosure vulnerability exists in prlhypervisor kext in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of user-supplied data. ...

Parallels Desktop Integer Overflow Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. An integer overflow elevation of privilege vulnerability exists in the prlhypervisor module in versions prior to Parallels Desktop 16.0.0 48916. The vulnerability stems from a lack of proper validation of user-supplied...