CVE-2020-8871

CVE-2020-8871 is a privilege escalation vulnerability affecting Parallels Desktop 15.1.0-47107. It stems from improper validation of user-supplied data in the VGA virtual device, leading to a buffer overflow. An attacker with high-privileged code execution on the guest system can exploit this to escalate privileges and execute code within the hypervisor, posing a significant risk to the host system. While rated Medium severity (CVSS 6.7), there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, though it has received some community discussion.