Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

74 records

Vendor: Parallels Component: Parallels Desktop Clear all filters
TI-2024-35227 CVE-2024-52561 · GHSA-h429-pw2c-7w4q

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00291 Published 2025-06-03 No fix listed CWE-708
TI-2024-36288 CVE-2024-54189 · GHSA-f2vx-65mp-r4fp

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2025-06-03 No fix listed CWE-62
TI-2024-24264 CVE-2024-36486 · GHSA-w3cx-68mp-rwcw

Link following in Parallels Desktop for Mac

Priority HIGH 69

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00337 Published 2025-06-03 No fix listed CWE-62
TI-2025-22549 CVE-2025-31359 · GHSA-97j7-rmfc-jv53

Path traversal in Parallels Desktop for Mac

Priority HIGH 73

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00518 Published 2025-06-03 No fix listed CWE-22
TI-2024-05787 CVE-2024-6240 · GHSA-x5f6-gmwc-2843

Improper privilege management in Parallels Desktop

Priority MEDIUM 43

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00317 Published 2024-06-21 Fixed in 19.3.0 CWE-269
TI-2024-05703 CVE-2024-6154 · GHSA-mr2m-75hp-m2f7

Heap-based buffer overflow in Parallels Desktop

Priority LOW 31

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0025 Published 2024-06-20 No fix listed CWE-122
TI-2024-05702 CVE-2024-6153 · GHSA-6r7r-h64q-j8pj

Protection mechanism failure in Parallels Desktop

Priority LOW 36

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00292 Published 2024-06-20 No fix listed CWE-693
TI-2023-27460 CVE-2023-50228 · GHSA-7jjm-882p-f82j

Improper signature verification in Parallels Desktop

Priority LOW 35

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00211 Published 2024-05-03 No fix listed CWE-347
TI-2023-27459 CVE-2023-50227 · GHSA-gwww-cpmw-jjf6

Out-of-bounds write in Parallels Desktop

Priority LOW 39

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.3 Network No auth User interaction EPSS 0.00757 Published 2024-05-03 No fix listed CWE-787
TI-2023-27458 CVE-2023-50226 · GHSA-9285-vgjw-7xjf

Link following in Parallels Desktop

Priority LOW 37

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00686 Published 2024-05-03 No fix listed CWE-59
TI-2023-12063 CVE-2023-27328 · GHSA-h2gx-393w-gcmp

XML injection in Parallels Desktop

Priority LOW 36

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00321 Published 2024-05-03 No fix listed CWE-91
TI-2023-12061 CVE-2023-27326 · GHSA-m9v9-rf34-2h2q

Path traversal in Parallels Desktop

Priority MEDIUM 40

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability.

CVSS 3.0HIGH 8.2 Local High privileges No interaction EPSS 0.0126 Published 2024-05-03 No fix listed CWE-22
TI-2022-15688 CVE-2022-34892 · GHSA-6pjr-prwx-2vxp

Race condition in Parallels Desktop

Priority LOW 34

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00257 Published 2022-07-18 No fix listed CWE-362
TI-2022-15687 CVE-2022-34891 · GHSA-p3pp-x9mc-3v4q

Incorrect permission assignment in Parallels Desktop

Priority LOW 34

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00296 Published 2022-07-15 No fix listed CWE-732
TI-2022-15685 CVE-2022-34889 · GHSA-hgqp-g8j9-8x49

Out-of-bounds read in Parallels Desktop

Priority LOW 36

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537).

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00353 Published 2022-07-15 No fix listed CWE-125
TI-2021-13977 CVE-2021-34987 · GHSA-c7jh-r37w-p7jc

Buffer overflow in Parallels Desktop

Priority LOW 36

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187).

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00341 Published 2022-07-15 No fix listed CWE-120
TI-2021-13976 CVE-2021-34986 · GHSA-6qf9-3c85-x94q

Time-of-check time-of-use race condition in Parallels Desktop

Priority LOW 34

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0027 Published 2022-07-15 No fix listed CWE-367
TI-2021-13854 CVE-2021-34864 · GHSA-84f6-qcw2-4r4x

Improper access control in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00236 Published 2021-10-25 No fix listed CWE-284
TI-2021-13847 CVE-2021-34857 · GHSA-xq5h-r69f-qf3r

Out-of-bounds write in Parallels Desktop

Priority LOW 38

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00271 Published 2021-10-25 No fix listed CWE-787
Load more