Parallels vulnerabilities
84 CVEs and advisories name Parallels as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-90894Parallels Desktop local privilege escalation via appliance extract argument injection
- CVE-2026-18263Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2026-18262Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2026-13121Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
- CVE-2024-52561A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).
- CVE-2024-54189A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740).
- CVE-2024-36486A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20
- CVE-2025-31359A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879).
- CVE-2025-30074Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM cr
- CVE-2025-0413Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability
- CVE-2024-6240Improper privilege management vulnerability in Parallels Desktop
- CVE-2024-6154Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
- CVE-2024-6153Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability
- CVE-2023-50228Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability
- CVE-2023-50227Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-50226Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability
- CVE-2023-27328Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
- CVE-2023-27327Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27326Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-27325Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27324Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27323Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27322Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2022-34902This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent.
- CVE-2022-34901This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent.
- CVE-2022-34900This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent.
- CVE-2022-34899This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent.
- CVE-2022-34892This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1.
- CVE-2022-34891This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1.
- CVE-2022-34890This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537).