← CVE Intelligence

CVE-2024-54189

Parallels / Parallels Desktop for Mac PUBLISHED

Description (CNA)

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By using a hard link, an attacker can write to an arbitrary file, potentially leading to privilege escalation.

Affected (CNA)

Vendor / productVersions
Parallels / Parallels Desktop for Macaffected version 20.1.1 (55740)

CWE

CWE-62

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.