CVE-2023-27326
HIGHParallels Desktop < 18.1.1 (53328) - Local Privilege Escalation via Toolgate Directory Traversal
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2023-27326. PoCs published by Impalabs, Malwareman007.
AI-analyzed exploit summary This repository contains a functional kernel module exploit for CVE-2023-27326, targeting a path validation flaw in Parallels Desktop's Toolgate component. The exploit leverages improper input validation to escalate privileges and execute arbitrary code on the host system.
Description
Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the current user on the host system. . Was ZDI-CAN-18933.
Exploits (2)
This repository contains a functional kernel module exploit for CVE-2023-27326, targeting a path validation flaw in Parallels Desktop's Toolgate component. The exploit leverages improper input validation to escalate privileges and execute arbitrary code on the host system.
This repository contains a functional kernel module exploit for CVE-2023-27326, a directory traversal vulnerability in Parallels Desktop's Toolgate component. The exploit leverages improper path validation to achieve local privilege escalation by writing arbitrary files on the host system.
References (2)
Scores
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H