PParallels

Products

Exploited and recent CVEs

• CVE-2026-90894 High 7.8 Parallels Desktop local privilege escalation via appliance extract argument injection 0.2%
• CVE-2026-18263 High 7.8 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability 0.2%
• CVE-2026-18262 High 7.8 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability 0.2%
• CVE-2026-13121 High 7.8 Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability 0.2%
• CVE-2024-52561 High 7.8 A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service ver 0.3%
• CVE-2024-54189 High 7.8 A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service write 0.3%
• CVE-2024-36486 High 7.8 A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, 0.3%
• CVE-2025-31359 High 8.8 A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write 0.5%
• CVE-2025-30074 High 7.8 Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine. 0.1%
• CVE-2025-0413 High 7.8 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability 0.4%
• CVE-2024-6240 High 7.7 Improper privilege management vulnerability in Parallels Desktop 0.3%
• CVE-2024-6154 High 8.2 Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability 0.2%
• CVE-2024-6153 High 7.8 Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability 0.3%
• CVE-2023-50228 High 7.8 Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability 0.2%
• CVE-2023-50227 High 8.3 Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability 0.8%
• CVE-2023-50226 High 7.8 Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability 0.7%
• CVE-2023-27328 High 7.8 Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability 0.3%
• CVE-2023-27327 High 7.5 Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability 0.4%
• CVE-2023-27326 High 8.2 Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability 1.3%
• CVE-2023-27325 High 7.8 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability 0.4%
• CVE-2023-27324 High 7.8 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability 0.4%
• CVE-2023-27323 High 7.8 Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability 0.2%
• CVE-2023-27322 High 7.8 Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability 0.4%
• CVE-2022-34902 High 7.8 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged 0.3%
• CVE-2022-34901 High 7.8 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged 0.3%
• CVE-2022-34900 High 7.8 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to execute low-privileged 0.4%
• CVE-2022-34899 High 7.0 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to execute low-privileged 0.2%
• CVE-2022-34892 High 7.8 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privi 0.3%
• CVE-2022-34891 High 7.8 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privi 0.3%
• CVE-2022-34890 High 7.3 This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-priv 0.3%