CVE-2020-17393

Name of the Vulnerable Software and Affected Versions Parallels Desktop version 15.1.3-47255

Description This issue allows local attackers to disclose information on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw exists within the prl hypervisor kext due to the lack of proper validation of user-supplied data, which can result in a pointer being leaked. This can be leveraged in conjunction with other issues to execute arbitrary code in the context of the kernel.

Recommendations For Parallels Desktop version 15.1.3-47255, at the moment, there is no information about a newer version that contains a fix for this issue.