Known vulnerabilities in Parallels Desktop

Vendor: Parallels
Software: Parallels Desktop
Software CPE: cpe:2.3:o:parallels:paralells_desktop:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Parallels Desktop Parallels Desktop is affected by 58 known vulnerabilities: 1 high, 57 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93371 - Protection Mechanism Failure
CVE-2024-6153		 CWE-693 Low
No
No
 18.3.0-53548 26.06.2024 SB2024062619
#VU93370 - Heap-based Buffer Overflow
CVE-2024-6154		 CWE-122 Low
No
No
 18.1.0 26.06.2024 SB2024062618
#VU84556 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-50226		 CWE-59 Low
No
No
 17.1.7, 18.3.2 19.12.2023 SB2023121943
#VU84555 - Improper Verification of Cryptographic Signature
CVE-2023-50228		 CWE-347 Low
No
No
 19.1.0 19.12.2023 SB2023121944
#VU84554 - Out-of-bounds write
CVE-2023-50227		 CWE-787 High
No
No
 19.1.0 19.12.2023 SB2023121944
#VU73233 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-27327		 CWE-367 Low
Available
No
 18.1.1 10.03.2023 SB2023031022
#VU73232 - Improper Initialization
CVE-2023-27322		 CWE-665 Low
No
No
 18.1.0 10.03.2023 SB2023031023
#VU73231 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-27323		 CWE-367 Low
No
No
 18.1.0 10.03.2023 SB2023031023
#VU73230 - Improper Initialization
CVE-2023-27324		 CWE-665 Low
No
No
 18.1.0 10.03.2023 SB2023031023
#VU73229 - Improper Initialization
CVE-2023-27325		 CWE-665 Low
No
No
 18.1.0 10.03.2023 SB2023031023
#VU73228 - XML Injection
CVE-2023-27328		 CWE-91 Low
Available
No
 18.1.1 10.03.2023 SB2023031022
#VU73226 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-27326		 CWE-22 Low
Available
No
 18.1.1 10.03.2023 SB2023031022
#VU60723 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-34986		 CWE-367 Low
No
No
 17.1.0 51516 21.02.2022 SB2022022101
#VU60722 - Permissions, Privileges, and Access Controls
CVE-2021-34987		 CWE-264 Low
No
No
 17.1.0 51516 21.02.2022 SB2022022101
#VU56979 - Improper Access Control
CVE-2021-34864		 CWE-284 Low
No
No
 17 01.10.2021 SB2021100103
#VU56892 - Uncontrolled Memory Allocation
CVE-2021-34869		 CWE-789 Low
No
No
 17.0.0 51461 27.09.2021 SB2021092711
#VU56891 - Uncontrolled Memory Allocation
CVE-2021-34867		 CWE-789 Low
No
No
 17.0.0 51461 27.09.2021 SB2021092711
#VU56890 - Uncontrolled Memory Allocation
CVE-2021-34868		 CWE-789 Low
No
No
 17.0.0 51461 27.09.2021 SB2021092711
#VU55533 - Out-of-bounds write
CVE-2021-34857		 CWE-787 Low
No
No
 16.5.1 03.08.2021 SB2021080307
#VU55530 - Uncontrolled Memory Allocation
CVE-2021-34854		 CWE-789 Low
No
No
 16.5.1 03.08.2021 SB2021080307


Showing elements 1 - 20 out of 58