EXPLOITS FOR UNPATCHED PARALLELS DESKTOP FLAW GIVE ROOT TO MACS

Summary from the TLDR InfoSec newsletter

Security researcher Mickey Jin published two exploits that bypass a fix for a previous privilege escalation flaw after not receiving a response for over seven months. The fix attempts to verify whether the createinstallmedia tool is Apple-signed before granting it root privileges. Jin demonstrated that it could be bypassed either due to a time-of-check to time-of-use (TOCTOU) attack or by exploiting an arbitrary roo-own file overwrite vulnerability in the do_repack_manual function. Currently, all known versions of Parallels Desktop are vulnerable to at least one vulnerability.