Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-31359

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.

Published

2025-06-03T10:15:22.240

Last Modified

2025-07-02T14:47:25.547

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application parallels parallels_desktop 20.2.2_\(55879\) Yes
References