PatchTheCVEparallels vulnerabilities
Recent CVEs affecting parallels products. 18 tracked.
parallels has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-06-03. Highest priority: CVE-2025-31359 (score 52/100).
- CVE-2025-31359 HIGH 8.8 MITIGATE A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop fo
- CVE-2025-0413 HIGH 7.8 UPGRADE UPGRADE Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability
- CVE-2024-6240 HIGH 7.7 UPGRADE Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than
- CVE-2024-6154 MEDIUM 6.7 UPGRADE Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
- CVE-2024-6153 HIGH 7.8 UPGRADE Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability
- CVE-2024-54189 HIGH 7.8 MITIGATE A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version
- CVE-2024-52561 HIGH 7.8 MITIGATE A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version
- CVE-2024-36486 HIGH 7.8 MITIGATE A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parall
- CVE-2023-50228 HIGH 7.8 MITIGATE Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerab
- CVE-2023-50227 HIGH 8.3 MITIGATE Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-50226 HIGH 7.8 MITIGATE Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability
- CVE-2023-27328 HIGH 7.8 MITIGATE Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability
- CVE-2023-27327 HIGH 7.5 MITIGATE Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27326 HIGH 8.2 MITIGATE Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-27325 HIGH 7.8 MITIGATE Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27324 HIGH 7.8 MITIGATE Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability
- CVE-2023-27323 HIGH 7.8 MITIGATE Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
- CVE-2023-27322 HIGH 7.8 MITIGATE Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability
FAQ
How do I fix parallels vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is parallels being exploited right now?
None of the tracked parallels CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which parallels CVE should I patch first?
CVE-2025-31359 currently ranks highest (52/100): A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop fo.