Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability

Parallels Desktop VGA Out-Of-Bounds Read Information Disclosure Vulnerability allows local attackers to disclose sensitive informations on affected installations. An attacker must execute high-privileged code on the target guest system to exploit this flaw. The issue exists within the VGA virtual device due to lack of proper data validation, allowing for a read past the end of an allocated array. Attackers can leverage this with other vulnerabilities to escalate privileges and execute code in the hypervisor context