Corel Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop 16.0.1-48919, which can be exploited by a local attacker to disclose sensitive information about an affected installation...

CVE-2021-27244: Out-of-bounds Read

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw...

Parallels Desktop 输入验证错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop Toolgate that stems from a lack of proper validation of user-supplied data, which could result in an integer overflow before a buffer is allocated. An attacker can...

Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop Toolgate that stems from a lack of proper validation of user-supplied data, which could lead to memory corruption. An attacker can exploit the vulnerability to execute...

CVE-2021-27243: Integer Overflow or Wraparound

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

Parallels Desktop Toolgate Out-of-Bounds Access Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop Toolgate that stems from a lack of proper validation of user-supplied data, which could lead to memory corruption. An attacker can exploit the vulnerability to execute...

Parallels Desktop Toolgate Integer Overflow Elevation of Privilege Vulnerability (CNVD-2021-34197)

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in Parallels Desktop Toolgate that stems from a lack of proper validation of user-supplied data, which could result in an integer overflow before a buffer is allocated. An attacker can...

Parallels Desktop Toolgate Integer Overflow Elevation of Privilege Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A vulnerability in Parallels Desktop Toolgate, which lacks proper validation of user-supplied data, can be exploited by an attacker to escalate privileges and execute arbitrary code in the context of the hypervisor...

Parallels Desktop Toolgate Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate...

PT-2021-17350

Name of the Vulnerable Software and Affected Versions: Parallels Desktop version 16.0.1-48919 Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest...

PT-2021-17348 · Parallels · Parallels Desktop

Name of the Vulnerable Software and Affected Versions: Parallels Desktop version 16.0.1-48919 Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest system in ord...

PT-2021-17349

Name of the Vulnerable Software and Affected Versions: Parallels Desktop version 16.0.1-48919 Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest system. The...

PT-2021-17364

Name of the Vulnerable Software and Affected Versions: Parallels Desktop version 16.0.1-48919 Description: This issue allows local attackers to disclose sensitive information on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target guest...

Parallels Desktop Toolgate Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate...

Parallels Desktop Toolgate Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within t...

PT-2021-17363

Name of the Vulnerable Software and Affected Versions: Parallels Desktop version 16.0.1-48919 Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target guest system. The...

Parallels Desktop Toolgate Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate...

Parallels Desktop Toolgate Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2020-35710

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...

Design/Logic Flaw

Parallels Remote Application Server RAS 18 allows remote attackers to discover an intranet IP address because submission of the login form even with blank credentials provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a...