Vulnerabilities

Parallels Desktop runs prl_disp_service as root.

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability.

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability.

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability.

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740).

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879).

Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine.

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability.

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0.

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability.

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability.

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability.

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability.

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability.

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability.

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability.

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability.

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability.

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability.

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability.

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code execution via standard kiosk breakout tech…

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks.