The CVE-2026-18262 vulnerability, known as Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability, allows local attackers to escalate privileges on affected installations of Parallels RAS Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists [truncated]
The Parallels RAS Client RDP Backend Service contains a vulnerability that allows for local privilege escalation due to an exposed dangerous function. This vulnerability, tracked as CVE-2026-13121, requires an attacker to first execute low-privileged code on the target system. The affected product is Parallels RAS Client. Defenders should verify the presence of affected installations and review the vendor [truncated]
