ZDI-23-220: Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability.

attackers code desktop escalation exploit injection local local privilege escalation low order parallels privilege privileged privilege escalation privileges system target vulnerability xml xml injection zdi