ZDI-24-803: Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability

Read Time:17 Second

This vulnerability allows local attackers to downgrade Parallels software on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-6153.

Read More