Parallels
Parallels Desktop: vulnerabilidades y CVE
Parallels Desktop tiene 77 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE77
Últimos 12 meses1
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-90894 | Alta (7.8) | 0.17% | — | 14 sept 2026 | Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. No Parallels signature. No admin group.… |
| CVE-2025-31359 | Alta (8.8) | 1.1% | — | 3 jun 2025 | A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files,… |
| CVE-2024-54189 | Alta (7.8) | 0.32% | — | 3 jun 2025 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned… |
| CVE-2024-52561 | Alta (7.8) | 0.28% | — | 3 jun 2025 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies… |
| CVE-2024-36486 | Alta (7.8) | 0.32% | — | 3 jun 2025 | A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver… |
| CVE-2025-30074 | Alta (7.8) | 0.12% | — | 16 mar 2025 | Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine. |
| CVE-2024-34331 | Crítica (9.8) | 1.00% | — | 23 sept 2024 | A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root. |
| CVE-2024-6240 | Crítica (10) | 0.32% | — | 21 jun 2024 | Improper privilege management vulnerability in Parallels Desktop Software, which affects versions earlier than 19.3.0. An attacker could add malicious code in a script and populate the BASH_ENV environment variable with… |
| CVE-2024-6154 | Media (6.7) | 0.25% | — | 20 jun 2024 | Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An… |
| CVE-2024-6153 | Alta (7.8) | 0.29% | — | 20 jun 2024 | Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability. This vulnerability allows local attackers to downgrade Parallels software on affected installations of Parallels Desktop. An… |
| CVE-2023-50228 | Alta (7.8) | 0.21% | — | 3 may 2024 | Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of… |
| CVE-2023-50227 | Alta (8.3) | 0.76% | — | 3 may 2024 | Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Parallels Desktop. User interaction… |
| CVE-2023-50226 | Alta (7.8) | 0.69% | — | 3 may 2024 | Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first… |
| CVE-2023-27328 | Alta (7.8) | 0.32% | — | 3 may 2024 | Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first… |
| CVE-2023-27327 | Alta (7.5) | 0.40% | — | 3 may 2024 | Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker… |
| CVE-2023-27326 | Alta (8.2) | 1.3% | — | 3 may 2024 | Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must… |
| CVE-2023-27325 | Alta (7.8) | 0.36% | — | 3 may 2024 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker… |
| CVE-2023-27324 | Alta (7.8) | 0.37% | — | 3 may 2024 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker… |
| CVE-2023-27323 | Alta (7.8) | 0.20% | — | 3 may 2024 | Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker… |
| CVE-2023-27322 | Alta (7.8) | 0.37% | — | 3 may 2024 | Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker… |
| CVE-2022-34892 | Alta (7.8) | 0.26% | — | 18 jul 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the… |
| CVE-2022-34891 | Alta (7.8) | 0.30% | — | 18 jul 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1. An attacker must first obtain the ability to execute low-privileged code on the… |
| CVE-2022-34890 | Alta (8.8) | 0.34% | — | 18 jul 2022 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute low-privileged code on the… |
| CVE-2022-34889 | Alta (8.2) | 0.35% | — | 18 jul 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537). An attacker must first obtain the ability to execute high-privileged code on the target… |
| CVE-2021-34987 | Alta (8.2) | 0.34% | — | 15 jul 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187). An attacker must first obtain the ability to execute high-privileged code on the target… |
| CVE-2021-34986 | Alta (7.8) | 0.27% | — | 15 jul 2022 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183). An attacker must first obtain the ability to execute low-privileged code on the target… |
| CVE-2021-34864 | Alta (8.8) | 0.24% | — | 25 oct 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute low-privileged code on the target… |
| CVE-2021-34857 | Alta (8.8) | 0.27% | — | 25 oct 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute high-privileged code on the target… |
| CVE-2021-34856 | Alta (8.8) | 0.27% | — | 25 oct 2021 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute high-privileged code on the target… |
| CVE-2021-34855 | Media (6.5) | 0.27% | — | 25 oct 2021 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160). An attacker must first obtain the ability to execute low-privileged code on the… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.