Vulnerabilities

TI-2023-12063 CVE-2023-27328 · GHSA-h2gx-393w-gcmp

XML injection in Parallels Desktop

LOW 36

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00321 Published 2024-05-03 No fix listed CWE-91

TI-2023-12062 CVE-2023-27327 · GHSA-7qrf-mvgv-r448

LOW 35

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.5 Local High privileges No interaction EPSS 0.00405 Published 2024-05-03 No fix listed CWE-367

TI-2023-12061 CVE-2023-27326 · GHSA-m9v9-rf34-2h2q

MEDIUM 40

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.0126 Published 2024-05-03 No fix listed CWE-22

TI-2023-12060 CVE-2023-27325 · GHSA-28h6-qj9x-44jv

LOW 36

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00363 Published 2024-05-03 No fix listed CWE-665

TI-2023-12059 CVE-2023-27324 · GHSA-hxvm-qw87-gw53

LOW 36

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2024-05-03 No fix listed CWE-665

TI-2023-12058 CVE-2023-27323 · GHSA-2wx8-vvfc-5r8w

LOW 35

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00201 Published 2024-05-03 No fix listed CWE-367

TI-2023-12057 CVE-2023-27322 · GHSA-x5j7-9pp6-47jv

LOW 36

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2024-05-03 No fix listed CWE-665