parallels Vulnerability Advisory Catalog

Total 153 security vulnerabilities recorded for parallels software and firmware.

← Back to All Vendors
Component: parallels_desktop

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulne...

📅 2025-06-03
CVSS 8.8 Dossier →
Component: parallels_desktop

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot o...

📅 2025-06-03
CVSS 7.8 Dossier →
Component: parallels_desktop

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot o...

📅 2025-06-03
CVSS 7.8 Dossier →
Component: parallels_desktop

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (5574...

📅 2025-06-03
CVSS 7.8 Dossier →
Component: remote_application_server

Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escal...

📅 2025-02-05
CVSS 7.8 Dossier →
Component: parallels_desktop

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious...

📅 2024-06-21
CVSS 7.7 Dossier →
CVE-2024-6154 MEDIUM
Component: parallels_desktop

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate ...

📅 2024-06-20
CVSS 6.7 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parall...

📅 2024-06-20
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local a...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary ...

📅 2024-05-03
CVSS 8.3 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate p...

📅 2024-05-03
CVSS 7.5 Dossier →
Component: parallels_desktop

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privile...

📅 2024-05-03
CVSS 8.2 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priv...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priv...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate pr...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: parallels_desktop

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate priv...

📅 2024-05-03
CVSS 7.8 Dossier →
CVE-2023-45894 CRITICAL
Component: remote_application_server

The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote atta...

📅 2023-12-14
CVSS 10.0 Dossier →
Component: remote_application_server

The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks. This vulnerability allows attackers to exe...

📅 2022-11-23
CVSS 8.1 Dossier →
Component: parallels_access

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must f...

📅 2022-07-18
CVSS 7.8 Dossier →
Component: parallels_access

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must f...

📅 2022-07-18
CVSS 7.8 Dossier →
Component: parallels_access

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must f...

📅 2022-07-18
CVSS 7.8 Dossier →
Component: parallels_access

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must f...

📅 2022-07-18
CVSS 7.8 Dossier →
Page 1 of 7 (153 Total Records)