CVEvulnerability
CVE-2025-31359
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Weaknesses
- CWE-22
Description
A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.
Affected configurations
• parallels parallels desktop 20.2.2 \(55879\)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2160 Exploit, Third Party Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2160 Exploit, Third Party Advisory
- https://talosintelligence.com/vulnerability_reports/TALOS-2025-2160 Exploit, Third Party Advisory