PD
Product
Parallels Desktop
76
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 2High 46Medium 23Low 1
Watch
Add Parallels Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8873 | 6.7 | Mar 23 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.2-47123 Affected: before 15.1.3 |
| CVE-2020-8871 | 6.7 | Mar 23 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.0-47107 Affected: before 15.1.3 |
| CVE-2021-34855 | 6.5 | Oct 25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160) Affected: 16.1.3 |
| CVE-2021-31419 | 6.5 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270 Affected: 15.1.4-47270 |
| CVE-2021-31418 | 6.5 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270 Affected: 15.1.4-47270 |
| CVE-2021-31417 | 6.5 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270 Affected: 15.1.4-47270 |
| CVE-2021-27244 | 6.5 | Mar 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919 Affected: 16.0.1 |
| CVE-2020-17402 | 6.5 | Aug 25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270) Affected: before 16.0.0 |
| CVE-2020-17398 | 6.5 | Aug 25 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4 Affected: before 16.0.0 |
| CVE-2020-17393 | 6.5 | Aug 25 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255 Affected: before 15.1.4 |
| CVE-2020-17391 | 6.5 | Aug 25 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.3-47255 Affected: before 16.0.0 |
| CVE-2021-31432 | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 Affected: 15.1.5-47309 |
| CVE-2021-31431 | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 Affected: 15.1.5-47309 |
| CVE-2021-31430 | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 Affected: 15.1.5-47309 |
| CVE-2021-31423 | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 Affected: 15.1.5-47309 |
| CVE-2021-31421 | 6.0 | Apr 29 | This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141 Affected: 16.1.1-49141 |
| CVE-2020-17401 | 6.0 | Aug 25 | This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4 Affected: before 16.0.0 |
| CVE-2020-17394 | 6.0 | Aug 25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 Affected: before 16.0.0 |
| CVE-2021-31427 | 5.6 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 Affected: 15.1.5-47309 |
| CVE-2020-8876 | 5.5 | Mar 23 | This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.2-47123 Affected: before 15.1.3 |
| CVE-2020-8872 | 4.4 | Mar 23 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.1-47117 Affected: before 15.1.3 |
| CVE-2021-27260 | 3.2 | Apr 14 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919 Affected: 16.0.1 |
| CVE-2007-2455 | – | May 2 | Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as demonstrated by INT 0xAA; (2) an IRET instruction when an… Affected: All versions, or not specified |
| CVE-2007-2454 | – | May 2 | Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating system, to terminate the virtual machine and possibly execute… Affected: All versions, or not specified |
| CVE-2007-1222 | – | Mar 2 | Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system… Affected: All versions, or not specified |
| CVE-2006-5817 | – | Nov 8 | prl_dhcpd in Parallels Desktop for Mac Build 1940 uses insecure permissions (0666) for /Library/Parallels/.dhcpd_configuration, which allows local users to modify DHCP… Affected: build_1940 |