PA
Vendor
Parallels
179
CVEs
0
On KEV
0
New 30D
Products
PD10.0
Parallels Desktop
Parallels
76 CVEs0 on KEV0 new
PP6.1
Parallels Plesk Panel
Parallels
42 CVEs0 on KEV0 new
PP–
Parallels Plesk Small Business Panel
Parallels
16 CVEs0 on KEV0 new
DE8.3
Desktop
Parallels
13 CVEs0 on KEV0 new
RA10.0
Remote Application Server
Parallels
7 CVEs0 on KEV0 new
PA8.8
Parallels
Parallels
5 CVEs0 on KEV0 new
PD8.8
Parallels Desktop for Mac
Parallels
5 CVEs0 on KEV0 new
PA7.8
Parallels Access
Parallels
4 CVEs0 on KEV0 new
HS6.1
H-sphere
Parallels
3 CVEs0 on KEV0 new
RC7.8
RAS Client
Parallels
3 CVEs0 on KEV0 new
CO–
Confixx
Parallels
1 CVEs0 on KEV0 new
PS–
Parallels Small Business Panel
Parallels
1 CVEs0 on KEV0 new
PV–
Parallels Virtuozzo
Parallels
1 CVEs0 on KEV0 new
PL–
Plesk
Parallels
1 CVEs0 on KEV0 new
VC–
Virtuozzo Containers
Parallels
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90894 | PD Parallels Desktop for Mac Parallels | 7.8 | Sep 14 | Parallels Desktop local privilege escalation via appliance extract argument injection |
| CVE-2026-18263 | RC RAS Client Parallels | 7.8 | Aug 20 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability |
| CVE-2026-18262 | RC RAS Client Parallels | 7.8 | Aug 20 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability |
| CVE-2026-13121 | RC RAS Client Parallels | 7.8 | Aug 20 | Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability |
| CVE-2024-52561 | PD Parallels Desktop for Mac Parallels | 7.8 | Jun 3 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740) |
| CVE-2024-54189 | PD Parallels Desktop for Mac Parallels | 7.8 | Jun 3 | A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740) |
| CVE-2024-36486 | PD Parallels Desktop for Mac Parallels | 7.8 | Jun 3 | A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740) |
| CVE-2025-31359 | PD Parallels Desktop for Mac Parallels | 8.8 | Jun 3 | A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879) |
| CVE-2025-30074 | PD Parallels Desktop Parallels | 7.8 | Mar 16 | Alludo Parallels Desktop before 19.4.2 and 20.x before 20.2.2 for macOS on Intel platforms allows privilege escalation to root via the VM creation routine |
| CVE-2025-0413 | DE Desktop Parallels | 7.8 | Feb 4 | Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability |
| CVE-2024-34331 | PD Parallels Desktop Parallels | 9.8 | Sep 23 | A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels… |
| CVE-2024-6240 | PD Parallels Desktop Parallels | 10.0 | Jun 21 | Improper privilege management vulnerability in Parallels Desktop |
| CVE-2024-6154 | DE Desktop Parallels | 6.7 | Jun 20 | Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability |
| CVE-2024-6153 | DE Desktop Parallels | 7.8 | Jun 20 | Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability |
| CVE-2023-50228 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability |
| CVE-2023-50227 | DE Desktop Parallels | 8.3 | May 3 | Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability |
| CVE-2023-50226 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability |
| CVE-2023-27328 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability |
| CVE-2023-27327 | DE Desktop Parallels | 7.5 | May 3 | Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability |
| CVE-2023-27326 | DE Desktop Parallels | 8.2 | May 3 | Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability |
| CVE-2023-27325 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability |
| CVE-2023-27324 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability |
| CVE-2023-27323 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability |
| CVE-2023-27322 | DE Desktop Parallels | 7.8 | May 3 | Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability |
| CVE-2023-45894 | RA Remote Application Server Parallels | 10.0 | Dec 14 | The Remote Application Server in Parallels RAS before 19.2.23975 does not segment virtualized applications from the server, which allows a remote attacker to achieve remote code… |
| CVE-2022-40870 | RA Remote Application Server Parallels | 8.1 | Nov 23 | The Web Client of Parallels Remote Application Server v18.0 is vulnerable to Host Header Injection attacks |
| CVE-2022-34902 | PA Parallels Access Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent |
| CVE-2022-34901 | PA Parallels Access Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent |
| CVE-2022-34900 | PA Parallels Access Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent |
| CVE-2022-34899 | PA Parallels Access Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent |
| CVE-2022-34892 | PD Parallels Desktop Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1 |
| CVE-2022-34891 | PD Parallels Desktop Parallels | 7.8 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop 17.1.1 |
| CVE-2022-34890 | PD Parallels Desktop Parallels | 8.8 | Jul 18 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 17.1.1 (51537) |
| CVE-2022-34889 | PD Parallels Desktop Parallels | 8.2 | Jul 18 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 17.1.1 (51537) |
| CVE-2021-34987 | PD Parallels Desktop Parallels | 8.2 | Jul 15 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.1 (49187) |
| CVE-2021-34986 | PD Parallels Desktop Parallels | 7.8 | Jul 15 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.5.0 (49183) |
| CVE-2022-30777 | HS H-sphere Parallels | 6.1 | May 16 | Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter |
| CVE-2021-34869 | PA Parallels Parallels | 8.8 | Jan 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160 |
| CVE-2021-34868 | PA Parallels Parallels | 8.8 | Jan 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160 |
| CVE-2021-34867 | PA Parallels Parallels | 8.2 | Jan 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160 |
| CVE-2020-8968 | RA Remote Application Server Parallels | 7.1 | Dec 17 | Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by… |
| CVE-2021-34864 | PD Parallels Desktop Parallels | 8.8 | Oct 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160) |
| CVE-2021-34857 | PD Parallels Desktop Parallels | 8.8 | Oct 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160) |
| CVE-2021-34856 | PD Parallels Desktop Parallels | 8.8 | Oct 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160) |
| CVE-2021-34855 | PD Parallels Desktop Parallels | 6.5 | Oct 25 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.1.3 (49160) |
| CVE-2021-34854 | PD Parallels Desktop Parallels | 7.8 | Oct 25 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3 (49160) |
| CVE-2021-31432 | PD Parallels Desktop Parallels | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31431 | PD Parallels Desktop Parallels | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31430 | PD Parallels Desktop Parallels | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31429 | PD Parallels Desktop Parallels | 8.2 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31428 | PD Parallels Desktop Parallels | 8.2 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31427 | PD Parallels Desktop Parallels | 5.6 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31426 | PD Parallels Desktop Parallels | 8.8 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151 |
| CVE-2021-31425 | PD Parallels Desktop Parallels | 8.8 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151 |
| CVE-2021-31424 | PD Parallels Desktop Parallels | 8.8 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31423 | PD Parallels Desktop Parallels | 6.0 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309 |
| CVE-2021-31422 | PD Parallels Desktop Parallels | 7.5 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141 |
| CVE-2021-31421 | PD Parallels Desktop Parallels | 6.0 | Apr 29 | This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141 |
| CVE-2021-31420 | PD Parallels Desktop Parallels | 8.8 | Apr 29 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950 |
| CVE-2021-31419 | PD Parallels Desktop Parallels | 6.5 | Apr 29 | This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270 |