https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:46:15 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-46861 cnvd-2020-46861 https://cve.radiocsirt.org/vuln/cnvd-2020-46861 https://cve.radiocsirt.org/vuln/euvd-2026-43651 EUVD-2026-43651 https://cve.radiocsirt.org/vuln/euvd-2026-43651 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17399 <p>This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prl_hypervisor kext. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-11303.</p> <p>This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prl_hypervisor kext. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-11303.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-17399 https://cve.radiocsirt.org/vuln/ghsa-v5ph-mr4c-hp43 <p>This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prl_hypervisor kext. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-11303.</p> <p>This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prl_hypervisor kext. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel. Was ZDI-CAN-11303.</p> https://cve.radiocsirt.org/vuln/ghsa-v5ph-mr4c-hp43 https://cve.radiocsirt.org/vuln/gsd-2020-17399 gsd-2020-17399 https://cve.radiocsirt.org/vuln/gsd-2020-17399