Skip to content

Parallels · weakness class

File and Path Handling

12 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when requesting a resource u…CVE-2017-9447Parallels · 2.0% likely

    CWE-22

  2. Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation VulnerabilityCVE-2023-27326Parallels · CVSS 8.2 · 1.3% likely

    CWE-22

  3. Parallels Desktop Updater Link Following Local Privilege Escalation VulnerabilityCVE-2023-50226Parallels · CVSS 7.8 · 0.7% likely

    CWE-59

  4. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute…CVE-2021-27278Parallels · CVSS 8.2 · 0.6% likely

    CWE-22

  5. A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by…CVE-2025-31359Parallels · CVSS 8.8 · 0.5% likely

    CWE-22

  6. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacker must first obtain the ability to ex…CVE-2022-34900Parallels · CVSS 7.8 · 0.4% likely

    CWE-427

  7. Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation VulnerabilityCVE-2025-0413Parallels · CVSS 7.8 · 0.4% likely

    CWE-59

  8. This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execu…CVE-2021-31421Parallels · CVSS 3.2 · 0.4% likely

    CWE-22

  9. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to ex…CVE-2022-34902Parallels · CVSS 7.8 · 0.3% likely

    CWE-427

  10. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.4 (39316) Agent. An attacker must first obtain the ability to ex…CVE-2022-34901Parallels · CVSS 7.8 · 0.3% likely

    CWE-427

  11. A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken,…CVE-2024-54189Parallels · CVSS 7.8 · 0.3% likely

    CWE-62

  12. A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual…CVE-2024-36486Parallels · CVSS 7.8 · 0.3% likely

    CWE-62

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.