CVE-2020-8876

CVE-2020-8876 is a local information disclosure vulnerability affecting Parallels Desktop 15.1.2-47123. The flaw stems from insufficient validation of user-supplied data within an IOCTL handler, leading to a read past the end of an allocated buffer. Rated as Medium severity (CVSS 5.5), exploitation requires an attacker to first gain low-privileged code execution on the target system. While it primarily allows information disclosure, it could be chained with other vulnerabilities to achieve arbitrary kernel-level code execution. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.