Public Parallels escapes concentrate in the ToolGate integration interface and the graphics and device emulation. Parallels is a standing Pwn2Own category, where researchers regularly chain a guest-to-host escape against macOS. Many require Parallels Tools in the guest, which exposes the richer integration surface.

Recurring Parallels escape surfaces:
- ToolGate (Parallels Tools integration channel)
- Graphics / display adapter
- Network and USB device emulation

Exploitation notes#

• Reachability depends on Parallels Tools and the enabled integration features; a bare guest without Tools exposes less.
• Escapes execute on macOS as the user running Parallels, then escalate; the surface map is in Guest to host escape.
• Contest write-ups are a good source of concrete technique for this proprietary target.

References#

• Zero Day Initiative: Parallels research
• Parallels security updates