Vulnerabilities > Parallels
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-04-29 | CVE-2021-31417 | Use of Uninitialized Resource vulnerability in Parallels Desktop 15.1.447270 This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. | 2.1 |
| 2021-04-22 | CVE-2021-27278 | Path Traversal vulnerability in Parallels Desktop 16.1.1 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. | 4.6 |
| 2021-04-14 | CVE-2021-27260 | Out-of-bounds Read vulnerability in Parallels Desktop 16.0.1 This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. | 2.1 |
| 2021-03-29 | CVE-2021-27244 | Out-of-bounds Read vulnerability in Parallels Desktop 16.0.1 This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. | 2.1 |
| 2021-03-29 | CVE-2021-27243 | Integer Overflow or Wraparound vulnerability in Parallels Desktop 16.0.1 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. | 4.6 |
| 2021-03-29 | CVE-2021-27242 | Out-of-bounds Write vulnerability in Parallels Desktop 16.0.1 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. | 4.6 |
| 2020-12-25 | CVE-2020-35710 | Information Exposure vulnerability in Parallels Remote Application Server 18.0 Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the attacker's client for use as a "host" value. | 5.0 |
| 2020-08-25 | CVE-2020-17402 | Incorrect Permission Assignment for Critical Resource vulnerability in Parallels Desktop This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4 (47270). | 2.1 |
| 2020-08-25 | CVE-2020-17401 | Improper Validation of Array Index vulnerability in Parallels Desktop This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. | 2.1 |
| 2020-08-25 | CVE-2020-17400 | Improper Validation of Array Index vulnerability in Parallels Desktop This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. | 4.6 |