CVE-2020-8872

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-47117. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2020-8871

The CVE-2020-8871 entry describes a local privilege-escalation flaw in Parallels Desktop 15.1.0-47107 caused by improper validation in the VGA virtual device, leading to a write past the end of an allocated buffer. An attacker must first gain the ability to execute high-privileged code on the tar...

CVE-2020-8873: Time-of-check Time-of-use (TOCTOU) Race Condition

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2020-8871: Out-of-bounds Write

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists with...

CVE-2020-8872: Out-of-bounds Read

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-47117. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

CVE-2020-8876: Improper Validation of Array Index

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-8874: Integer Overflow or Wraparound

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2020-8875: Improper Validation of Array Index

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Corel Parallels Desktop IOCTL handler input validation error vulnerability

Corel Parallels Desktop is a suite of virtual machine software from Corel Canada for the macOS platform.IOCTL handler is one of the system call handlers dedicated to device input and output operations. An input validation error vulnerability exists in the IOCTL handler in Corel Parallels Desktop...

Parallels Desktop xHCI Component Buffer Overflow Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer overflow vulnerability exists in the xHCI component in Parallels Desktop. The vulnerability originates when a networked system or product performs an operation in memory without...

Parallels Desktop xHCI Component Input Validation Error Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. An input validation error vulnerability exists in the xHCI component of Corel Parallels Desktop version 15.1.2-47123, which stems from the program not properly validating user-submitted data. ...

Parallels Desktop VGA Virtual Appliance Buffer Overflow Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer overflow vulnerability exists in the VGA virtual appliance in Parallels Desktop, which stems from the program failing to properly validate user-submitted data. An attacker could explo...

Parallels Desktop Buffer Overflow Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer overflow vulnerability exists in the IOCTL processor in Parallels Desktop, which stems from the program failing to properly validate user-submitted data. An attacker could exploit the...

Parallels Desktop xHCI Component Competitive Conditions Issue Vulnerability

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A competitive condition issue vulnerability exists in the xHCI component in Corel Parallels Desktop version 15.1.2-47123. An attacker could exploit the vulnerability to elevate privileges and...

PT-2020-20343

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.2-47123 Description This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest system in orde...

PT-2020-20342

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.1-47117 Description This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest...

PT-2020-20346

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.2-47123 Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

Parallels Desktop xHCI Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the xHCI...

Parallels Desktop xHCI Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

Parallels Desktop VGA Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop . An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the VGA...