cvedb.io
CVE-2025-31359
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2025-06-03T10:15:22.240 · Last modified 2026-06-17T09:10:17.263

Summary

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.

Affected products

parallels — parallels_desktop

Does this affect you?

Add your gear to cvedb and we'll alert you only when parallels ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.