CVE-2024-52561

HIGH

Parallels Desktop for Mac 20.1.1 - Privilege Escalation via Snapshot Symlink Ownership Manipulation

Title source: llm
STIX 2.1

Description

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege escalation.

References (2)

Core 2

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 14.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-708 CWE-59
Status published
Products (1)
parallels/parallels_desktop 20.1.1_\(55740\)
Published Jun 03, 2025
Tracked Since Feb 18, 2026