CVE-2024-34331 - Vulnerability Details - OpenCVE

A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00422.

Exploitation poc

Automatable yes

Technical Impact total

Vendors	Products
Parallels	Parallels Desktop

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://kb.parallels.com/129860
https://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html

History

Mon, 14 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00359}`	epss `{'score': 0.00503}`

Mon, 23 Sep 2024 17:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Parallels Parallels parallels Desktop
Weaknesses		CWE-269
CPEs		cpe:2.3:a:parallels:parallels_desktop::::::macos::*
Vendors & Products		Parallels Parallels parallels Desktop
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 23 Sep 2024 15:45:00 +0000

Type	Values Removed	Values Added
Description		A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.
References		https://kb.parallels.com/129860 https://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-09-23T00:00:00

Updated: 2024-09-23T16:15:56.922Z

Reserved: 2024-05-02T00:00:00

Link: CVE-2024-34331

Vulnrichment

Updated: 2024-09-23T16:15:35.797Z

NVD

Status : Awaiting Analysis

Published: 2024-09-23T16:15:05.400

Modified: 2024-09-26T13:32:55.343

Link: CVE-2024-34331

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-34331", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-09-23T16:15:56.922Z", "dateReserved": "2024-05-02T00:00:00", "datePublished": "2024-09-23T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-23T15:31:25.047060"}, "descriptions": [{"lang": "en", "value": "A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://kb.parallels.com/129860"}, {"url": "https://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-269", "lang": "en", "description": "CWE-269 Improper Privilege Management"}]}], "affected": [{"vendor": "parallels", "product": "parallels_desktop", "cpes": ["cpe:2.3:a:parallels:parallels_desktop:*:*:*:*:*:macos:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "19.3.0", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-23T16:13:25.838698Z", "id": "CVE-2024-34331", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-23T16:15:56.922Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-34331", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-23T16:13:25.838698Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:parallels:parallels_desktop:*:*:*:*:*:macos:*:*"], "vendor": "parallels", "product": "parallels_desktop", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "19.3.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-23T16:15:35.797Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://kb.parallels.com/129860"}, {"url": "https://khronokernel.com/macos/2024/05/30/CVE-2024-34331.html"}], "descriptions": [{"lang": "en", "value": "A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-09-23T15:31:25.047060"}}}, "cveMetadata": {"cveId": "CVE-2024-34331", "state": "PUBLISHED", "dateUpdated": "2024-09-23T16:15:56.922Z", "dateReserved": "2024-05-02T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-09-23T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}