A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.

Related CVEs

CVE-2024-34331

Key Information

GHSA ID

GHSA-23qc-7hjx-vwmv

Published

September 23, 2024 6:30 PM

Last Modified

September 23, 2024 6:30 PM

CVSS Score

9.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: November 26, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.