CVE-2024-6240

CVE-2024-6240 is a critical improper privilege management vulnerability in Parallels Desktop versions prior to 19.3.0. An unauthenticated attacker can exploit this by injecting malicious code into the BASH_ENV variable, leading to arbitrary code execution and privilege escalation upon application startup. With a CVSS score of 10.0, this vulnerability poses a severe risk of complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the high FAUCET Risk Score of 80/100 indicates its potential for future exploitation.