Skip to content
Threat Feed
Subscribe

Product

Parallels Desktop (< 27.0.0)

1 brief RSS
high advisory

Local Privilege Escalation in Parallels Desktop via Argument Injection

Parallels Desktop versions prior to 27.0.0 are vulnerable to local privilege escalation via an argument injection flaw in the root-privileged prl_disp_service.

Parallels Desktop privilege-escalation macos vulnerability cve-2026-90894
1r 2t 1c