CVE-2023-20636
https://notcve.org/view.php?id=CVE-2023-20636
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-27328 – Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2023-27328
07 Mar 2023 — Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. ... An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the ... • https://kb.parallels.com/125013 • CWE-91: XML Injection (aka Blind XPath Injection) •
CVE-2023-20624
https://notcve.org/view.php?id=CVE-2023-20624
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVE-2023-20643
https://notcve.org/view.php?id=CVE-2023-20643
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-27322 – Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2023-27322
07 Mar 2023 — Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. ... An attacker can leverage this vulnerability to escalate privileges and execute arbitrary cod... • https://kb.parallels.com/125013 • CWE-665: Improper Initialization •
CVE-2023-20626
https://notcve.org/view.php?id=CVE-2023-20626
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-20642
https://notcve.org/view.php?id=CVE-2023-20642
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-20639
https://notcve.org/view.php?id=CVE-2023-20639
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-20638
https://notcve.org/view.php?id=CVE-2023-20638
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 • CWE-20: Improper Input Validation •
CVE-2023-20628
https://notcve.org/view.php?id=CVE-2023-20628
07 Mar 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://corp.mediatek.com/product-security-bulletin/March-2023 •