Parallels runs each VM through host-side processes that emulate the guest's devices and expose integration interfaces (notably the ToolGate channel used by Parallels Tools). These parse guest-controlled input on the host, so memory-corruption flaws in the graphics, network, USB, or ToolGate handlers let a guest execute code on the macOS host.
Parallels guest escape surfaces (reachable from a guest):
- The ToolGate interface (Parallels Tools integration channel)
- Graphics / display adapter
- Network and USB controllers
Exploitation notes#
- The ToolGate interface and the graphics path are recurring, productive targets, especially when Parallels Tools is installed in the guest.
- Escapes land on the macOS host as the user running Parallels, then escalate with a separate macOS local privilege escalation.
- Named instances are under Known escape exploits.