VulnSocial

CVE-2024-54189PoC(parallels / parallels_desktop)

LOWCVSS 7.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch parallels parallels_desktop systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is taken, a root service writes to a file owned by a normal user. By using a hard link, an attacker can write to an arbitrary file, potentially leading to privilege escalation.

parallels CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-62CWE-59

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • parallels_desktop

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
parallels
Products
parallels_desktop

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-05: 1PoC Mentioned / Linked · 2026-06-05: 1Patch / Workaround · 2026-06-05: 106-05
Signal classification1 categories
PoC
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼️ #ParallelsDesktop: Proof of Concept (#PoC) pubblici per le CVE-2024-54189, CVE-2025-31359, CVE-2024-52561 e CVE-2024-36486 Rischio: 🔴 ⚠ Ove non provveduto, si raccomanda l'applicazione delle mitigazioni disponibili https://x.com/csirt_it/status/2062847538370064690/photo/1 https://x.com/csirt_it/status/1930162468942123422

    Post summary

    csirt_it announces publicly available Proof of Concept for several Parallels Desktop CVEs and recommends applying mitigations, but does not detail exploit code, active exploitation, or core technical aspects.

    0001089
    615 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appparallelsparallels_desktop20.1.1_\(55740\)macos-

Explore more

Back to dashboardparallels CVEsparallels_desktop vulnerabilities