[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWfjHwPHL70YqP01jktkHUBoTZonTI0QWWlmAlGIadBo":3},{"article":4,"iocs":41,"watch_terms":46,"solutions":47,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":28,"category":29,"article_tags":33},"4dff96f3-b77b-4b89-9690-82296ba290ff","Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix","parallels-desktop-flaw-lets-non-admin-mac-users-gain-root-but-intel-macs-can-t-i-f1a5ac","Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already running on the machine as a normal user, so it does not work over the network. JFrog says the fix is in Parallels Desktop 27, a version that Intel Macs cannot install. Yuval Moravchick, who leads","A vulnerability in Parallels Desktop for Mac, identified as CVE-2026-90894, allows local, non-administrator users to escalate privileges to root. The exploit leverages a world-writable socket and improper argument parsing in the prl_disp_service, enabling arbitrary command execution as root. While a fix is available in Parallels Desktop 27, it is not compatible with Intel-based Macs, leaving a segment of users vulnerable.","Parallels Desktop flaw allows non-admin Mac users to gain root access.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F09\u002Fparallels-desktop-flaw-lets-non-admin.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjExQfYsCTPbCiUrkVUWdKhrZNgpAVRtutRYt2c4x-f5ClJdNYjERcet4Fctan3gEOl0DPk64GUGZv5IK3Cd_pi3Jk1cyH3tdYig9mpc2XTLjJaK0KM3aiqE6W1OeGiKr_kRWNRmty1u4Cwf_9-S1KrKdqUeL25YwL6tt5Z-nUcvzj0F8NemzMbSUmvTJ4\u002Fs1600\u002Fparashells.jpg","2026-09-16T13:14:05+00:00","2026-09-16T16:00:11.978575+00:00",8,[17,20,23,26],{"name":18,"type":19},"Parallels Desktop","product",{"name":21,"type":22},"JFrog","vendor",{"name":24,"type":25},"Virtual Machines","technology",{"name":27,"type":25},"macOS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":28,"icon":30,"name":31,"slug":32},null,"Vulnerabilities","vulnerabilities",[34,36],{"category":35},{"id":28,"icon":30,"name":31,"slug":32},{"category":37},{"id":38,"icon":30,"name":39,"slug":40},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-90894","Parallels Desktop privilege escalation vulnerability",[21,18],{"controls":48,"vendors":134},[49,77,105],{"slug":50,"name":51,"problem":52,"products":53},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[54,62,69],{"vendor_slug":55,"vendor_name":56,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":50,"product_name":66,"url":67,"description":68},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"slug":78,"name":79,"problem":80,"products":81},"patch-management","Automated patch management","Known holes get closed in days, not months.",[82,90,97],{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":78,"product_name":94,"url":95,"description":96},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":106,"name":107,"problem":108,"products":109},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",[135],{"slug":136,"name":21,"logo_path":137,"roles":138},"jfrog","\u002Fvendor-logos\u002Fjfrog.png",[139],"reported_by",{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":155},"parallels-desktop-root-escalation-leaves-intel-mac-users-unpatched","Parallels Desktop Root Escalation Leaves Intel Mac Users Unpatched","A privilege escalation vulnerability in Parallels Desktop exploits a world-writable socket and improper argument parsing in a privileged service, allowing any local user to execute arbitrary commands as root. This is a critical design flaw: exposing a privileged communication channel with insufficient input validation effectively hands attackers a direct path to full system compromise. Compounding the risk, the official fix in Parallels Desktop 27 is incompatible with Intel-based Macs, meaning a significant portion of the user base has no vendor-supported remediation path. This situation highlights how end-of-support hardware\u002Fsoftware combinations can leave organizations permanently exposed, requiring compensating controls rather than straightforward patching.",[145,146,147,148,149,150,151,152,153,154],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 7: Continuous Vulnerability Management","CIS Control 5: Account Management","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 RA-5: Vulnerability Monitoring and Scanning","MITRE ATT&CK T1068: Exploitation for Privilege Escalation","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities",{}]