Approved changes feed: RSS · Atom

cpe:2.3:a:parallels:parallels:16.1.3-49160:*:*:*:*:*:*:*

part: a version: 16.1.3-49160 update: *

VendorParallels (f7bc486c-fad7-5571-9bc2-c91e15af2082)
ProductParallels (06ad513f-4f52-5e68-afdc-53f2d45dbb18)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34869 vulnerable 2026-06-03 14:44:48.382344 Details available
HIGH (7.8)
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13797.
Published: 2022-01-25T15:30:40.000Z
Updated: 2024-08-04T00:26:54.668Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34868 vulnerable 2026-06-03 14:44:48.382000 Details available
HIGH (7.8)
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13712.
Published: 2022-01-25T15:30:39.000Z
Updated: 2024-08-04T00:26:54.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34867 vulnerable 2026-06-03 14:44:48.381551 Details available
HIGH (7.5)
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an uncontrolled memory allocation. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13672.
Published: 2022-01-25T15:30:37.000Z
Updated: 2024-08-04T00:26:54.586Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.