CVE-2023-37250

Unity Parsec has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs. This affects Parsec Loader versions through 8. Parsec Loader 9 is a fixed version.

• CWE-367

• https://support.parsec.app/hc/en-us/articles/18311425588237-CVE-2023-37250Third Party Advisory
• https://unity3d.comProduct
• https://www.kb.cert.org/vuls/id/287122Third Party Advisory, US Government Resource
• https://support.parsec.app/hc/en-us/articles/18311425588237-CVE-2023-37250Third Party Advisory
• https://unity3d.comProduct
• https://www.kb.cert.org/vuls/id/287122Third Party Advisory, US Government Resource

Published

Aug 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-37245Buffer overflow vulnerability in the modem pinctrl module. S…9.1
• CVE-2023-37246A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-37247A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-37248A vulnerability has been identified in Tecnomatix Plant Simu…7.8
• CVE-2023-37249Infoblox NIOS through 8.5.1 has a faulty component that acce…8.8
• CVE-2023-3725Potential buffer overflow vulnerability in the Zephyr CAN bu…9.8
• CVE-2023-37251An issue was discovered in the GoogleAnalyticsMetrics extens…6.1
• CVE-2023-37254An issue was discovered in the Cargo extension for MediaWiki…6.1
• CVE-2023-37255An issue was discovered in the CheckUser extension for Media…6.1
• CVE-2023-37256An issue was discovered in the Cargo extension for MediaWiki…6.1
• CVE-2023-37257DataEase is an open source data visualization analysis tool.…5.4
• CVE-2023-37258DataEase is an open source data visualization analysis tool.…9.8