writeups.xyz / Escaping Parallels Desktop with Plist Injection

Submitter : c2a

Date: 8 May 2023

Bounty : undisclosed

Vulnerabilities :

• Local Privilege Escalation
• Plist Injection
• TOCTOU

Programs :

• Parallels

Authors :

• Kn32

Link :
https://pwn.win/2023/05/08/parallels-escape.html