Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17392

CVE-2020-17392 involves Parallels Desktop, affecting the prl_hypervisor kext. The flaw is an unvalidated user-supplied value being dereferenced as a pointer in HOST_IOCTL_SET_KERNEL_SYMBOLS, enabling local privilege escalation to kernel context when an attacker can run low-privileged code. Multip...