# cve.now: Parallels

The newest entries naming Parallels as an affected vendor (up to 200), of 84 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-90894](https://cve.now/CVE-2026-90894.md): Parallels Desktop local privilege escalation via appliance extract argument injection (CVSS 7.8)
- [CVE-2026-18263](https://cve.now/CVE-2026-18263.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2026-18262](https://cve.now/CVE-2026-18262.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2026-13121](https://cve.now/CVE-2026-13121.md): Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-52561](https://cve.now/CVE-2024-52561.md): A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). (CVSS 7.8)
- [CVE-2024-54189](https://cve.now/CVE-2024-54189.md): A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). (CVSS 7.8)
- [CVE-2024-36486](https://cve.now/CVE-2024-36486.md): A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20 (CVSS 7.8)
- [CVE-2025-31359](https://cve.now/CVE-2025-31359.md): A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). (CVSS 8.8)
- [CVE-2025-30074](https://cve.now/CVE-2025-30074.md): Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM cr (CVSS 7.8)
- [CVE-2025-0413](https://cve.now/CVE-2025-0413.md): Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2024-6240](https://cve.now/CVE-2024-6240.md): Improper privilege management vulnerability in Parallels Desktop (CVSS 7.7)
- [CVE-2024-6154](https://cve.now/CVE-2024-6154.md): Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability (CVSS 8.2)
- [CVE-2024-6153](https://cve.now/CVE-2024-6153.md): Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability (CVSS 7.8)
- [CVE-2023-50228](https://cve.now/CVE-2023-50228.md): Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-50227](https://cve.now/CVE-2023-50227.md): Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 8.3)
- [CVE-2023-50226](https://cve.now/CVE-2023-50226.md): Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-27328](https://cve.now/CVE-2023-27328.md): Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-27327](https://cve.now/CVE-2023-27327.md): Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability (CVSS 7.5)
- [CVE-2023-27326](https://cve.now/CVE-2023-27326.md): Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability (CVSS 8.2)
- [CVE-2023-27325](https://cve.now/CVE-2023-27325.md): Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-27324](https://cve.now/CVE-2023-27324.md): Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-27323](https://cve.now/CVE-2023-27323.md): Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2023-27322](https://cve.now/CVE-2023-27322.md): Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability (CVSS 7.8)
- [CVE-2022-34902](https://cve.now/CVE-2022-34902.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. (CVSS 7.8)
- [CVE-2022-34901](https://cve.now/CVE-2022-34901.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. (CVSS 7.8)
- [CVE-2022-34900](https://cve.now/CVE-2022-34900.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. (CVSS 7.8)
- [CVE-2022-34899](https://cve.now/CVE-2022-34899.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. (CVSS 7.0)
- [CVE-2022-34892](https://cve.now/CVE-2022-34892.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. (CVSS 7.8)
- [CVE-2022-34891](https://cve.now/CVE-2022-34891.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. (CVSS 7.8)
- [CVE-2022-34890](https://cve.now/CVE-2022-34890.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). (CVSS 7.3)
- [CVE-2022-34889](https://cve.now/CVE-2022-34889.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). (CVSS 8.2)
- [CVE-2021-34987](https://cve.now/CVE-2021-34987.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187). (CVSS 8.2)
- [CVE-2021-34986](https://cve.now/CVE-2021-34986.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183). (CVSS 7.8)
- [CVE-2021-34869](https://cve.now/CVE-2021-34869.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. (CVSS 7.8)
- [CVE-2021-34868](https://cve.now/CVE-2021-34868.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. (CVSS 7.8)
- [CVE-2021-34867](https://cve.now/CVE-2021-34867.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. (CVSS 7.5)
- [CVE-2020-8968](https://cve.now/CVE-2020-8968.md): Parallels Remote Application Server credentials management errors (CVSS 7.1)
- [CVE-2021-34864](https://cve.now/CVE-2021-34864.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). (CVSS 8.8)
- [CVE-2021-34857](https://cve.now/CVE-2021-34857.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). (CVSS 8.2)
- [CVE-2021-34856](https://cve.now/CVE-2021-34856.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). (CVSS 8.2)
- [CVE-2021-34855](https://cve.now/CVE-2021-34855.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160). (CVSS 6.5)
- [CVE-2021-34854](https://cve.now/CVE-2021-34854.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). (CVSS 7.8)
- [CVE-2021-31432](https://cve.now/CVE-2021-31432.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 6.0)
- [CVE-2021-31431](https://cve.now/CVE-2021-31431.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 6.0)
- [CVE-2021-31430](https://cve.now/CVE-2021-31430.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 6.0)
- [CVE-2021-31429](https://cve.now/CVE-2021-31429.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 8.2)
- [CVE-2021-31428](https://cve.now/CVE-2021-31428.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 8.2)
- [CVE-2021-31427](https://cve.now/CVE-2021-31427.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 7.3)
- [CVE-2021-31426](https://cve.now/CVE-2021-31426.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. (CVSS 8.8)
- [CVE-2021-31425](https://cve.now/CVE-2021-31425.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. (CVSS 8.8)
- [CVE-2021-31424](https://cve.now/CVE-2021-31424.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 8.8)
- [CVE-2021-31423](https://cve.now/CVE-2021-31423.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. (CVSS 6.0)
- [CVE-2021-31422](https://cve.now/CVE-2021-31422.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. (CVSS 7.5)
- [CVE-2021-31421](https://cve.now/CVE-2021-31421.md): This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. (CVSS 3.2)
- [CVE-2021-31420](https://cve.now/CVE-2021-31420.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. (CVSS 8.8)
- [CVE-2021-31419](https://cve.now/CVE-2021-31419.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. (CVSS 6.5)
- [CVE-2021-31418](https://cve.now/CVE-2021-31418.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. (CVSS 6.5)
- [CVE-2021-31417](https://cve.now/CVE-2021-31417.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. (CVSS 6.5)
- [CVE-2021-27278](https://cve.now/CVE-2021-27278.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. (CVSS 8.2)
- [CVE-2021-27260](https://cve.now/CVE-2021-27260.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. (CVSS 3.2)
- [CVE-2021-27259](https://cve.now/CVE-2021-27259.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. (CVSS 7.8)
- [CVE-2021-27244](https://cve.now/CVE-2021-27244.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. (CVSS 6.5)
- [CVE-2021-27243](https://cve.now/CVE-2021-27243.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. (CVSS 8.8)
- [CVE-2021-27242](https://cve.now/CVE-2021-27242.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. (CVSS 8.8)
- [CVE-2020-17402](https://cve.now/CVE-2020-17402.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270). (CVSS 6.5)
- [CVE-2020-17401](https://cve.now/CVE-2020-17401.md): This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. (CVSS 6.0)
- [CVE-2020-17400](https://cve.now/CVE-2020-17400.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. (CVSS 8.8)
- [CVE-2020-17399](https://cve.now/CVE-2020-17399.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. (CVSS 8.8)
- [CVE-2020-17398](https://cve.now/CVE-2020-17398.md): This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. (CVSS 6.5)
- [CVE-2020-17397](https://cve.now/CVE-2020-17397.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. (CVSS 7.5)
- [CVE-2020-17396](https://cve.now/CVE-2020-17396.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. (CVSS 8.8)
- [CVE-2020-17395](https://cve.now/CVE-2020-17395.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. (CVSS 7.5)
- [CVE-2020-17394](https://cve.now/CVE-2020-17394.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. (CVSS 6.0)
- [CVE-2020-17393](https://cve.now/CVE-2020-17393.md): This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. (CVSS 6.5)
- [CVE-2020-17392](https://cve.now/CVE-2020-17392.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. (CVSS 8.8)
- [CVE-2020-17391](https://cve.now/CVE-2020-17391.md): This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. (CVSS 6.5)
- [CVE-2020-17390](https://cve.now/CVE-2020-17390.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. (CVSS 3.8)
- [CVE-2020-8876](https://cve.now/CVE-2020-8876.md): This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. (CVSS 6.5)
- [CVE-2020-8875](https://cve.now/CVE-2020-8875.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. (CVSS 8.8)
- [CVE-2020-8874](https://cve.now/CVE-2020-8874.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. (CVSS 7.5)
- [CVE-2020-8873](https://cve.now/CVE-2020-8873.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. (CVSS 8.2)
- [CVE-2020-8872](https://cve.now/CVE-2020-8872.md): This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-47117. (CVSS 6.0)
- [CVE-2020-8871](https://cve.now/CVE-2020-8871.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . (CVSS 8.2)
- [CVE-2019-17148](https://cve.now/CVE-2019-17148.md): This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14 (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/parallels
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.