← back
CVE-2025-31359

CVE-2025-31359

CVSS 8.8 HIGHEPSS 1.7%CWE-22
A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Parallels · Parallels Desktop for Mac

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2160https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2160