CVE-2023-50226— Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability
Quick assessment
Affected
Parallels Desktop
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Corel Parallels Desktop是加拿大科亿尔数码科技（Corel）公司的一套适用于macOS平台的虚拟机软件。 Parallels Desktop 存在安全漏洞，该漏洞源于更新程序服务中存在特定缺陷，通过创建符号链接可以滥用该服务来移动任意文件，攻击者利用该漏洞可以提升权限并执行任意代码。
Possible ATT&CK Techniques 3 AI
T1055 · Process Injection T1059.004 · Unix Shell T1546.001 · Change Default File Association
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-50226
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability.
The specific flaw exists within the Updater service. By creating a symbolic link, an attacker can abuse the service to move arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.
. Was ZDI-CAN-21227.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Vulnerability Title
Parallels Desktop 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Corel Parallels Desktop是加拿大科亿尔数码科技（Corel）公司的一套适用于macOS平台的虚拟机软件。 Parallels Desktop 存在安全漏洞，该漏洞源于更新程序服务中存在特定缺陷，通过创建符号链接可以滥用该服务来移动任意文件，攻击者利用该漏洞可以提升权限并执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-50226
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Parallels Desktop privilege escalation - CVE-2023-50226 / ZDI-CAN-21227 | https://github.com/kn32/parallels-file-move-privesc | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-50226
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-50226 (1)
-
ZDI-23-1805 | Zero Day Initiative x_research-advisory
Other References for CVE-2023-50226 (1)
-
https://kb.parallels.com/en/125013 vendor-advisory
Same Patch Batch · Parallels · 2024-05-03 · 10 CVEs total
| CVE-2023-27328 | Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability | |
| CVE-2023-27324 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability | |
| CVE-2023-27326 | Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability | |
| CVE-2023-27327 | Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerabil | |
| CVE-2023-27325 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability | |
| CVE-2023-27323 | Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerabili | |
| CVE-2023-27322 | Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability | |
| CVE-2023-50228 | Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege | |
| CVE-2023-50227 | Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability |
IV. Related Vulnerabilities
Same product: Desktop
-
CVE-2026-45150
Zen Browser - Missing Fullscreen Security Notification Allow -
CVE-2026-57501
Zen: Context-menu "Open link in glance" / "Split link in new -
CVE-2026-44659
Zen Browser Mac - Address Bar Spoofing via Long Subdomain -
CVE-2026-44658
Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restri -
CVE-2026-41431
Zen Browser MAR updater ships with signature verification re
Same vendor: Parallels
-
CVE-2026-90894
Parallels Desktop local privilege escalation via appliance e -
CVE-2026-18263
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-18262
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2026-13121
Parallels RAS Client RDP Backend Service Exposed Dangerous F -
CVE-2024-52561
Parallels Desktop 安全漏洞
Same weakness: CWE-59
-
CVE-2026-102113
Kiteworks Core Local Privilege Escalation -
CVE-2026-102118
Kiteworks Core before version 9.5.0 is vulnerable to Local P -
CVE-2026-81310
Linux图像扫描驱动存在链接跟随漏洞 -
CVE-2026-102242
Path Traversal via Symlink Following in allowedLocalRoots in -
CVE-2026-92371
Local Privilege Escalation via Improper Link Resolution in C
V. Comments for CVE-2023-50226
No comments yet