Skip to content
OpenAdvisories

Product · Parallels

Parallels Desktop for Mac

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.8
    CVE-2026-90894

    Parallels Desktop local privilege escalation via appliance extract argument injection

    Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group. After login, PrlSrv_InstallAppliance let…

    Parallels Parallels Desktop for Mac
  • High 7.8
    CVE-2024-52561

    A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (…

    Parallels Parallels Desktop for Mac
  • High 7.8
    CVE-2024-54189

    A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (…

    Parallels Parallels Desktop for Mac
  • High 7.8
    CVE-2024-36486

    A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Deskt…

    Parallels Parallels Desktop for Mac
  • High 8.8
    CVE-2025-31359

    A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac ver…

    Parallels Parallels Desktop for Mac