CVE-2025-31359
Published Jun 3, 2025A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by…
Vendor archive
parallels CVEs
Beta · best-effort154 CVEs tagged to vendor parallels — 20 Critical, 67 High, 65 Medium, 2 Low, 0 Unrated.
CVE-2024-54189
Published Jun 3, 2025A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken,…
CVE-2024-52561
Published Jun 3, 2025A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is delete…
CVE-2024-36486
Published Jun 3, 2025A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual…
CVE-2025-0413
Published Feb 5, 2025Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected in…
- evidence mentions
- 2
- Buzz score
- 21.0
CVE-2024-6240
Published Jun 21, 2024Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious code in a script and populat…
CVE-2024-6154
Published Jun 20, 2024Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected instal…
CVE-2024-6153
Published Jun 20, 2024Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parallels software on affected inst…
CVE-2023-50228
Published May 3, 2024Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileg…
CVE-2023-50227
Published May 3, 2024Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installation…
CVE-2023-50226
Published May 3, 2024Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pa…
CVE-2023-27328
Published May 3, 2024Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pa…
CVE-2023-27327
Published May 3, 2024Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected install…
CVE-2023-27326
Published May 3, 2024Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations…
CVE-2023-27325
Published May 3, 2024Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installati…
CVE-2023-27324
Published May 3, 2024Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installati…
CVE-2023-27323
Published May 3, 2024Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installa…
CVE-2023-27322
Published May 3, 2024Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installati…
CVE-2023-45894
Published Dec 14, 2023The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code e…
CVE-2022-40870
Published Nov 23, 2022The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to execute arbitrary commands via a…
CVE-2022-34902
Published Jul 18, 2022This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to ex…
CVE-2022-34901
Published Jul 18, 2022This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to ex…
CVE-2022-34900
Published Jul 18, 2022This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to ex…
CVE-2022-34899
Published Jul 18, 2022This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to ex…
CVE-2022-34892
Published Jul 18, 2022This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability…
Showing 1-25 of 154 CVEsPage 1 of 7