A high-severity vulnerability in Unity Parsec allows local attackers to elevate their privileges to a higher level, potentially gaining full system control.

This vulnerability involves the incorrect use of privileged APIs, which can be exploited by an authenticated local user to perform unauthorized actions with elevated permissions.

Elevation of privilege vulnerabilities significantly increase the attack surface, as they allow a low-privileged user to bypass security controls and perform administrative tasks. With a CVSS score of 8.4, this flaw could lead to total system takeover, the installation of persistent backdoors, and the unauthorized access or exfiltration of sensitive information stored on the host.

Immediate Action: Update the Parsec software to the latest version provided by Unity to resolve the privileged API misuse.

Proactive Monitoring: Audit system logs for unexpected privilege changes or the creation of new administrative accounts on Windows hosts running Parsec.

Compensating Controls: Implement the principle of least privilege for all local users and restrict the ability of standard users to execute or interact with sensitive application binaries.

Public Exploit Available: false

Elevation of privilege flaws are frequently used in the second stage of an attack to gain persistence and control. It is critical that security teams deploy the vendor-supplied update immediately to prevent local attackers or malicious software from escalating their access level on the host system.