Skip to content
OpenAdvisories
High · 8.8 CVE-2025-31359 EUVD-2025-16718GHSA-97j7-rmfc-jv53

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879).…

Published Jun 3, 2025 · Updated Jun 3, 2025 · Assigned by talos

Description

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.

Affected products

VendorProductAffectedFixed
Parallels Parallels Desktop for Mac 20.2.2 (55879) —

References