CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27327

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. Was ZDI-CAN-18964.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 18.5%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-27327

Parallels » Parallels Desktop » Version: 14.0.0

cpe:2.3:a:parallels:parallels_desktop:14.0.0
Parallels » Parallels Desktop » Version: 14.0.1

cpe:2.3:a:parallels:parallels_desktop:14.0.1
Parallels » Parallels Desktop » Version: 14.1.0

cpe:2.3:a:parallels:parallels_desktop:14.1.0
Parallels » Parallels Desktop » Version: 14.1.1

cpe:2.3:a:parallels:parallels_desktop:14.1.1
Parallels » Parallels Desktop » Version: 14.1.2

cpe:2.3:a:parallels:parallels_desktop:14.1.2
Parallels » Parallels Desktop » Version: 14.1.3

cpe:2.3:a:parallels:parallels_desktop:14.1.3
Parallels » Parallels Desktop » Version: 15.0.0

cpe:2.3:a:parallels:parallels_desktop:15.0.0
Parallels » Parallels Desktop » Version: 15.1.0

cpe:2.3:a:parallels:parallels_desktop:15.1.0
Parallels » Parallels Desktop » Version: 15.1.1

cpe:2.3:a:parallels:parallels_desktop:15.1.1
Parallels » Parallels Desktop » Version: 15.1.2

cpe:2.3:a:parallels:parallels_desktop:15.1.2
Parallels » Parallels Desktop » Version: 15.1.3

cpe:2.3:a:parallels:parallels_desktop:15.1.3
Parallels » Parallels Desktop » Version: 15.1.4

cpe:2.3:a:parallels:parallels_desktop:15.1.4
Parallels » Parallels Desktop » Version: 16.0.0

cpe:2.3:a:parallels:parallels_desktop:16.0.0
Parallels » Parallels Desktop » Version: 16.0.1

cpe:2.3:a:parallels:parallels_desktop:16.0.1
Parallels » Parallels Desktop » Version: 16.1.0

cpe:2.3:a:parallels:parallels_desktop:16.1.0
Parallels » Parallels Desktop » Version: 16.1.1

cpe:2.3:a:parallels:parallels_desktop:16.1.1
Parallels » Parallels Desktop » Version: 16.1.2

cpe:2.3:a:parallels:parallels_desktop:16.1.2
Parallels » Parallels Desktop » Version: 16.1.3

cpe:2.3:a:parallels:parallels_desktop:16.1.3
Parallels » Parallels Desktop » Version: 16.5.0

cpe:2.3:a:parallels:parallels_desktop:16.5.0
Parallels » Parallels Desktop » Version: 16.5.1

cpe:2.3:a:parallels:parallels_desktop:16.5.1
Parallels » Parallels Desktop » Version: 17.0.0_(51461)

cpe:2.3:a:parallels:parallels_desktop:17.0.0_(51461)
Parallels » Parallels Desktop » Version: 17.0.1_(51482)

cpe:2.3:a:parallels:parallels_desktop:17.0.1_(51482)
Parallels » Parallels Desktop » Version: 17.1.0_(51516)

cpe:2.3:a:parallels:parallels_desktop:17.1.0_(51516)
Parallels » Parallels Desktop » Version: 17.1.3_(51565)

cpe:2.3:a:parallels:parallels_desktop:17.1.3_(51565)
Parallels » Parallels Desktop » Version: 17.1.7_(51588)

cpe:2.3:a:parallels:parallels_desktop:17.1.7_(51588)
Parallels » Parallels Desktop » Version: 18.0.0_(53049)

cpe:2.3:a:parallels:parallels_desktop:18.0.0_(53049)
Parallels » Parallels Desktop » Version: 18.0.1_(53056)

cpe:2.3:a:parallels:parallels_desktop:18.0.1_(53056)
Parallels » Parallels Desktop » Version: 18.0.2_(53077)

cpe:2.3:a:parallels:parallels_desktop:18.0.2_(53077)
Parallels » Parallels Desktop » Version: 18.0.3_(53079)

cpe:2.3:a:parallels:parallels_desktop:18.0.3_(53079)
Parallels » Parallels Desktop » Version: 18.1.0_(53311)

cpe:2.3:a:parallels:parallels_desktop:18.1.0_(53311)

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-27327

Products

Pricing

Contact Us