← CVE Intelligence

CVE-2025-31359

Parallels / Parallels Desktop for Mac PUBLISHED

Description (CNA)

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.

Affected (CNA)

Vendor / productVersions
Parallels / Parallels Desktop for Macaffected 20.2.2 (55879)

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.