Vulnerabilities

TI-2025-00332 CVE-2025-0413 · GHSA-wwfq-cq3f-8qx7

Link following in Parallels Desktop

LOW 36

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00415 Published 2025-02-04 No fix listed CWE-59

TI-2021-13859 CVE-2021-34869 · GHSA-8vhh-3c8h-fwc3

LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00418 Published 2022-01-25 No fix listed CWE-789

TI-2021-13858 CVE-2021-34868 · GHSA-xr5h-rxwf-6q73

LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00423 Published 2022-01-25 No fix listed CWE-789

TI-2021-13857 CVE-2021-34867 · GHSA-8vvh-6wqm-9fpw

LOW 36

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00429 Published 2022-01-25 No fix listed CWE-789

TI-2020-05824 CVE-2020-7213 · GHSA-x3x6-8w8x-2p8g

LOW 35

Parallels 13 uses cleartext HTTP as part of the update process, allowing man-in-the-middle attacks.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01091 Published 2020-01-21 No fix listed CWE-312