Parallels

Records159All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical21CVSS 9.0–10.0

CVSS high71CVSS 7.0–8.9

Exploited now

Parallels records in CISA KEV

No Parallels vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Parallels · all components

TI-2021-13859 CVE-2021-34869 · GHSA-8vhh-3c8h-fwc3

LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00418 Published 2022-01-25 No fix listed CWE-789

TI-2021-13858 CVE-2021-34868 · GHSA-xr5h-rxwf-6q73

LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00423 Published 2022-01-25 No fix listed CWE-789

TI-2025-00332 CVE-2025-0413 · GHSA-wwfq-cq3f-8qx7

LOW 36

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00415 Published 2025-02-04 No fix listed CWE-59

TI-2021-13857 CVE-2021-34867 · GHSA-8vvh-6wqm-9fpw

LOW 36

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00429 Published 2022-01-25 No fix listed CWE-789

TI-2020-05824 CVE-2020-7213 · GHSA-x3x6-8w8x-2p8g

LOW 35

Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01091 Published 2020-01-21 No fix listed CWE-312