Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 47270. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

Design/Logic Flaw

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Integer overflow

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17402

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 47270. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17402

CVE-2020-17402 affects Parallels Desktop 15.1.4 (47270) via a flaw in the prl_hypervisor kext. The weakness allows a local, low-privilege attacker who can run code on the target to disclose a memory address by inspecting a log file, which could be used with other vulnerabilities to escalate to ke...

CVE-2020-17400

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17400

The CVE-2020-17400 entry concerns Parallels Desktop (vulnerable through the prl_hypervisor kext). A local attacker who can run low-privilege code can exploit an input-validation flaw that leads to a read past the end of an allocated buffer, enabling privilege escalation and code execution in the ...

CVE-2020-17401

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17401

CVE-2020-17401 affects Parallels Desktop 15.1.4, with the vulnerability located in the VGA virtual device. The issue is an out-of-bounds read caused by improper validation of user-supplied data, allowing local attackers who can execute high-privilege code on the guest to read past the end of an a...

CVE-2020-17399

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17399

CVE-2020-17399 affects Parallels Desktop (15.1.4) with the prl_hypervisor kext. The flaw arises from insufficient validation of user-supplied data, causing a write past the end of an allocated buffer and enabling local privilege escalation to kernel context. Several connected sources corroborate ...

CVE-2020-17397

CVE-2020-17397 affects Parallels Desktop (notably 15.1.4) where a memory corruption triggered by improper validation of data in network packet handling allows local privilege escalation to the hypervisor context. Exploitation requires high-privilege code execution on the target guest; no public e...

CVE-2020-17398

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17398

CVE-2020-17398 affects Parallels Desktop (notably 15.1.4) through the prl_hypervisor kernel extension. The issue is an out-of-bounds read caused by insufficient validation of user-supplied data, enabling local attackers who can run low-privilege code to disclose information and, in combination wi...

CVE-2020-17395

Parallels Desktop contains a local privilege-escalation flaw in the prl_naptd process due to an improper validation of user-supplied data, causing an integer underflow before memory write. This can allow an attacker with the ability to run high-privilege code on a guest to escalate privileges and...

CVE-2020-17395

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17396

CVE-2020-17396 affects Parallels Desktop (notably 15.1.4) via the prl_hypervisor module. The issue is an integer overflow caused by insufficient validation of user-supplied data, leading to a buffer allocation error and the possibility for a local attacker to escalate privileges and execute code ...