CVE-2021-34987

CVE-2021-34987 is a high-severity privilege escalation vulnerability affecting Parallels Desktop 16.5.1 (49187), specifically within the HDAudio virtual device. It stems from improper validation of user-supplied data length, allowing an attacker with high-privileged guest system access to execute arbitrary code in the hypervisor context. The CVSS score is 8.2 (High), indicating a local attack vector with high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat profile despite its severity.