Vulnerabilidades em Parallels

80 resultados
Análise Vexday

Com 80 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, o perfil de risco imediato do Parallels situa-se abaixo da média geral do catálogo, sem registros de severidade crítica, PoCs públicas disponíveis ou novas vulnerabilidades nos últimos 90 dias. O tipo de falha mais recorrente é CWE-125 (leitura fora dos limites de buffer), padrão que, embora não represente risco imediato elevado, costuma servir de base para cadeias de exploração mais complexas quando combinado com outras vulnerabilidades. A CVE de maior atenção no momento é CVE-2025-31359, com escore EPSS de 0,0168, indicando probabilidade de exploração ainda baixa no curto prazo. Equipes de segurança podem manter monitoramento de rotina, priorizando o controle de CVEs relacionadas a leituras de memória fora dos limites e acompanhando eventuais evoluções no EPSS de CVE-2025-31359.

CVE-2021-27260LOWThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An EPSS 0.5%CVE-2020-17395HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firEPSS 0.5%CVE-2020-17402MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270). AEPSS 0.5%CVE-2020-17397HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must firEPSS 0.5%CVE-2021-31425HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2021-31426HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker muEPSS 0.5%CVE-2021-31423MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-31430MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-31432MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-31431MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An EPSS 0.4%CVE-2021-27259HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker muEPSS 0.4%CVE-2021-31429HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker muEPSS 0.4%CVE-2021-31428HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker muEPSS 0.4%CVE-2021-31424HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker muEPSS 0.4%CVE-2021-31420HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An attacker muEPSS 0.4%CVE-2021-31419MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An EPSS 0.4%CVE-2021-31417MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An EPSS 0.4%CVE-2021-31418MEDIUMThis vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An EPSS 0.4%CVE-2021-34867HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker muEPSS 0.4%CVE-2022-34900HIGHThis vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 (39313) Agent. An attacEPSS 0.4%