CVE-2020-17402

CVE-2020-17402 is a sensitive information disclosure vulnerability affecting Parallels Desktop 15.1.4 (47270) that allows a local attacker with low-privileged code execution to disclose a memory address by examining a log file within the prl_hypervisor kext. This vulnerability has a CVSS score of 6.5 (Medium) and requires local access with low attack complexity, but can lead to high confidentiality impact. While it does not directly allow for privilege escalation, it can be chained with other vulnerabilities to achieve kernel-level code execution. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.