30
Search: “Privilege Management for Windows & Mac”
39 stories
Microsoft fixes critical wormable Windows flaw (CVE-2025-47981)
60
60
60
60
47
60
60
60
60
Wormable Flaw, 0days Lead Sept. 2022 Patch Tuesday
60
Microsoft Patch Tuesday, December 2022 Edition
60
55
30
June 2020 Patch Tuesday: Microsoft fixes record monthly number of CVEs
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
60
42
55
30
Parallels Desktop Vulnerability Lets Non-Admin Mac Users Execute Code as Root
JFrog researchers disclosed CVE-2026-90894, a critical Parallels Desktop local privilege escalation letting non-admin Mac users execute code as root; fixed in 27.0.0.
JFrog researchers found that Parallels Desktop's privileged prl_disp_service daemon on macOS accepts unsigned local clients through a world-writable socket and allows argument injection into a tar command during appliance installation. Injecting the --use-compress-program option makes tar execute an attacker-controlled program as root, and a one-line proof of concept yielded a root shell without needing a running virtual machine. The flaw, dubbed ParaShells, was confirmed in Parallels Desktop 26.4.0 build 57513 on Apple Silicon and is fixed in version 27.0.0. No exploitation in the wild has been reported; administrators should inventory and upgrade affected installations and restrict local account access.
62
55
60
42
55
60
35
60
60
60
60
60
60
55
August 2020 Patch Tuesday: Microsoft fixes two vulnerabilities under attack
60
55
55
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months
60
47