CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27323

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the Updater service. By creating a symbolic link, an attacker can abuse the service to execute a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. . Was ZDI-CAN-18150.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.4%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2023-27323

Parallels » Parallels Desktop » Version: 14.0.0

cpe:2.3:a:parallels:parallels_desktop:14.0.0
Parallels » Parallels Desktop » Version: 14.0.1

cpe:2.3:a:parallels:parallels_desktop:14.0.1
Parallels » Parallels Desktop » Version: 14.1.0

cpe:2.3:a:parallels:parallels_desktop:14.1.0
Parallels » Parallels Desktop » Version: 14.1.1

cpe:2.3:a:parallels:parallels_desktop:14.1.1
Parallels » Parallels Desktop » Version: 14.1.2

cpe:2.3:a:parallels:parallels_desktop:14.1.2
Parallels » Parallels Desktop » Version: 14.1.3

cpe:2.3:a:parallels:parallels_desktop:14.1.3
Parallels » Parallels Desktop » Version: 15.0.0

cpe:2.3:a:parallels:parallels_desktop:15.0.0
Parallels » Parallels Desktop » Version: 15.1.0

cpe:2.3:a:parallels:parallels_desktop:15.1.0
Parallels » Parallels Desktop » Version: 15.1.1

cpe:2.3:a:parallels:parallels_desktop:15.1.1
Parallels » Parallels Desktop » Version: 15.1.2

cpe:2.3:a:parallels:parallels_desktop:15.1.2
Parallels » Parallels Desktop » Version: 15.1.3

cpe:2.3:a:parallels:parallels_desktop:15.1.3
Parallels » Parallels Desktop » Version: 15.1.4

cpe:2.3:a:parallels:parallels_desktop:15.1.4
Parallels » Parallels Desktop » Version: 16.0.0

cpe:2.3:a:parallels:parallels_desktop:16.0.0
Parallels » Parallels Desktop » Version: 16.0.1

cpe:2.3:a:parallels:parallels_desktop:16.0.1
Parallels » Parallels Desktop » Version: 16.1.0

cpe:2.3:a:parallels:parallels_desktop:16.1.0
Parallels » Parallels Desktop » Version: 16.1.1

cpe:2.3:a:parallels:parallels_desktop:16.1.1
Parallels » Parallels Desktop » Version: 16.1.2

cpe:2.3:a:parallels:parallels_desktop:16.1.2
Parallels » Parallels Desktop » Version: 16.1.3

cpe:2.3:a:parallels:parallels_desktop:16.1.3
Parallels » Parallels Desktop » Version: 16.5.0

cpe:2.3:a:parallels:parallels_desktop:16.5.0
Parallels » Parallels Desktop » Version: 16.5.1

cpe:2.3:a:parallels:parallels_desktop:16.5.1
Parallels » Parallels Desktop » Version: 17.0.0_(51461)

cpe:2.3:a:parallels:parallels_desktop:17.0.0_(51461)
Parallels » Parallels Desktop » Version: 17.0.1_(51482)

cpe:2.3:a:parallels:parallels_desktop:17.0.1_(51482)
Parallels » Parallels Desktop » Version: 17.1.0_(51516)

cpe:2.3:a:parallels:parallels_desktop:17.1.0_(51516)
Parallels » Parallels Desktop » Version: 17.1.3_(51565)

cpe:2.3:a:parallels:parallels_desktop:17.1.3_(51565)
Parallels » Parallels Desktop » Version: 17.1.7_(51588)

cpe:2.3:a:parallels:parallels_desktop:17.1.7_(51588)
Parallels » Parallels Desktop » Version: 18.0.0_(53049)

cpe:2.3:a:parallels:parallels_desktop:18.0.0_(53049)
Parallels » Parallels Desktop » Version: 18.0.1_(53056)

cpe:2.3:a:parallels:parallels_desktop:18.0.1_(53056)
Parallels » Parallels Desktop » Version: 18.0.2_(53077)

cpe:2.3:a:parallels:parallels_desktop:18.0.2_(53077)
Parallels » Parallels Desktop » Version: 18.0.3_(53079)

cpe:2.3:a:parallels:parallels_desktop:18.0.3_(53079)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27323

Products

Pricing

Contact Us