Read the docs

Parallels

Records159All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high71CVSS 7.0–8.9

Exploited now

Parallels records in CISA KEV

No Parallels vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Parallels Desktop 74 records HIGH Parallels Plesk Panel 42 records MEDIUM Parallels Plesk Small Business Panel 16 records MEDIUM Remote Application Server 7 records HIGH Parallels 5 records LOW Parallels Access 4 records LOW H-sphere 3 records LOW Confixx 1 record MEDIUM

Records

74 records in Parallels Desktop · all components

TI-2025-22549 CVE-2025-31359 · GHSA-97j7-rmfc-jv53

Path traversal in Parallels Desktop for Mac

Priority HIGH 73

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00518 Published 2025-06-03 No fix listed CWE-22
TI-2024-36288 CVE-2024-54189 · GHSA-f2vx-65mp-r4fp

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2025-06-03 No fix listed CWE-62
TI-2024-35227 CVE-2024-52561 · GHSA-h429-pw2c-7w4q

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00291 Published 2025-06-03 No fix listed CWE-708
TI-2024-24264 CVE-2024-36486 · GHSA-w3cx-68mp-rwcw

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2025-06-03 No fix listed CWE-62
TI-2024-05787 CVE-2024-6240 · GHSA-x5f6-gmwc-2843

Improper privilege management in Parallels Desktop

Priority MEDIUM 43

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00317 Published 2024-06-21 Fixed in 19.3.0 CWE-269
TI-2023-12061 CVE-2023-27326 · GHSA-m9v9-rf34-2h2q

Path traversal in Parallels Desktop

Priority MEDIUM 40

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.0126 Published 2024-05-03 No fix listed CWE-22
TI-2023-27459 CVE-2023-50227 · GHSA-gwww-cpmw-jjf6

Out-of-bounds write in Parallels Desktop

Priority LOW 39

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.00757 Published 2024-05-03 No fix listed CWE-787
TI-2020-13166 CVE-2020-17400 · GHSA-x435-xm6f-rmv2

Improper array index validation in Parallels Desktop

Priority LOW 39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00533 Published 2020-08-25 No fix listed CWE-129
TI-2020-13165 CVE-2020-17399 · GHSA-v5ph-mr4c-hp43

Improper array index validation in Parallels Desktop

Priority LOW 39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00533 Published 2020-08-25 No fix listed CWE-129
TI-2020-13162 CVE-2020-17396 · GHSA-6vjr-pq4w-q95w

Integer overflow in Parallels Desktop

Priority LOW 39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00533 Published 2020-08-25 No fix listed CWE-190
TI-2020-13156 CVE-2020-17390 · GHSA-f8v5-m5fc-qx3f

Out-of-bounds read in Parallels Desktop

Priority LOW 39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00531 Published 2020-08-25 No fix listed CWE-125
TI-2020-07129 CVE-2020-8875 · GHSA-cpg6-9v3m-5jvx

Improper array index validation in Parallels Desktop

Priority LOW 39

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00545 Published 2020-03-23 No fix listed CWE-129
TI-2021-13854 CVE-2021-34864 · GHSA-84f6-qcw2-4r4x

Improper access control in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00236 Published 2021-10-25 No fix listed CWE-284
TI-2021-13847 CVE-2021-34857 · GHSA-xq5h-r69f-qf3r

Out-of-bounds write in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00271 Published 2021-10-25 No fix listed CWE-787
TI-2021-13846 CVE-2021-34856 · GHSA-6pfq-pjhj-7hvv

Memory corruption in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00267 Published 2021-10-25 No fix listed CWE-119
TI-2021-11555 CVE-2021-31426 · GHSA-4gp2-5wrm-9g4v

Integer overflow in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00452 Published 2021-04-29 No fix listed CWE-190
TI-2021-11554 CVE-2021-31425 · GHSA-c9vw-q5pf-p74w

Integer overflow in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00452 Published 2021-04-29 No fix listed CWE-190
TI-2021-11553 CVE-2021-31424 · GHSA-338g-7g45-fv76

Heap-based buffer overflow in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00436 Published 2021-04-29 No fix listed CWE-122
TI-2021-11549 CVE-2021-31420 · GHSA-354r-h986-7xhw

Stack-based buffer overflow in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00436 Published 2021-04-29 No fix listed CWE-121
TI-2021-08783 CVE-2021-27243 · GHSA-j878-frp6-c8fh

Integer overflow in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00286 Published 2021-03-29 No fix listed CWE-190
TI-2021-08782 CVE-2021-27242 · GHSA-rwqq-qx65-frwc

Out-of-bounds write in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0028 Published 2021-03-29 No fix listed CWE-787
TI-2023-27458 CVE-2023-50226 · GHSA-9285-vgjw-7xjf

Link following in Parallels Desktop

Priority LOW 37

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00686 Published 2024-05-03 No fix listed CWE-59
TI-2024-05702 CVE-2024-6153 · GHSA-6r7r-h64q-j8pj

Protection mechanism failure in Parallels Desktop

Priority LOW 36

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00292 Published 2024-06-20 No fix listed CWE-693
Load more
Open these records in search →