parallels desktop · threatengine.sh

Home/Product/parallels desktop

Product

parallels desktop

74 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac

Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker

Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local at

Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers

< 19.1.0_\(54729\)

Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerab

< 19.1.0_\(54729\)

Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers t

< 17.1.7_\(51588\)

Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to es

< 18.1.1_\(53328\)

Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to es

< 18.1.1_\(53328\)

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local att

< 18.1.1_\(53328\)

Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers

< 18.1.0_\(53311\)

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attack

< 18.1.0_\(53311\)

Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attack

< 18.1.0_\(53311\)

Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local atta

< 18.1.0_\(53311\)

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attack

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187). An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183). An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An a

This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. A

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacke

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacke

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attack

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacke

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacke

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacke

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4.

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.3-47255. An a

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255. An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An a

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123. An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An a

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123. An a

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 . An

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop

Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as demonstrate

Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to t

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which

prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_configuration, wh

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin