Sari la conținut

Română · beta. Traducerea a fost făcută automat și este încă în curs de revizuire. Citește pagina în engleză

perspectiva aiqbenchSiguranță AI

analiza aiqbench

This article details a critical local privilege escalation flaw in Parallels Desktop that allows non-admin users to gain root access via argument injection during virtual machine appliance installation. The vulnerability, known as "ParaShells," exploits weak authentication and world-writable sockets in the host daemon to execute arbitrary code on Apple Silicon Macs. While the software is a productivity tool, the core technical analysis focuses entirely on the mechanics of the exploit and its implications for system security, making it relevant to AI/quantum readers interested in infrastructure hardening and container/virtualization safety.
Sursă care acoperăCybersecurity News
Ce este aceastaLectura unui model asupra articolului și a acoperirii conexe, scrisă pentru aiqbench. Nu sunt cuvintele publicației.

Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root

Cybersecurity News3 min de cititArticolul și perspectiva sunt în engleză.

A critical local privilege escalation vulnerability in Parallels Desktop for Mac could allow a non-administrator user or unprivileged process to execute attacker-controlled code with root privileges. Tracked as CVE-2026-90894 and called “ParaShells,” the vulnerability was confirmed in Parallels Desktop 26.4.0 build 57513 on Apple Silicon Macs. Parallels addressed the issue with the release of version […] The post Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root appeared first on Cyber Security News.

A critical local privilege escalation vulnerability in Parallels Desktop for Mac could allow a non-administrator user or unprivileged process to execute attacker-controlled code with root privileges. Tracked as CVE-2026-90894 and called “ParaShells,” the vulnerability was confirmed in Parallels Desktop 26.4.0 build 57513 on Apple Silicon Macs. Parallels addressed the…

Extras afișat conform termenilor RSS ai publicației · 49 cuvinte · textul integral și figurile sunt pe site-ul publicației

Subiecte conexe