VulnSocial

CVE-2025-31359PoC(parallels / parallels_desktop)

LOWCVSS 8.8 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch parallels parallels_desktop systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.

parallels CVEsBack to dashboard
2.0/ 10 priority

Sources & remediation

Exploit / PoC references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • parallels_desktop

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
parallels
Products
parallels_desktop

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-05: 1PoC Mentioned / Linked · 2026-06-05: 1Patch / Workaround · 2026-06-05: 106-05
Signal classification1 categories
PoC
1100.0%
Referenced assets2 URLs
Full discourse1 post
  • Hephaestvs@Vulcanux_
    PoC

    csirt_it: ‼️ #ParallelsDesktop: Proof of Concept (#PoC) pubblici per le CVE-2024-54189, CVE-2025-31359, CVE-2024-52561 e CVE-2024-36486 Rischio: 🔴 ⚠ Ove non provveduto, si raccomanda l'applicazione delle mitigazioni disponibili https://x.com/csirt_it/status/2062847538370064690/photo/1 https://x.com/csirt_it/status/1930162468942123422

    Post summary

    Public PoCs are available for several Parallels Desktop CVEs, with mitigation guidance provided; no active exploitation or detailed vulnerability information is reported.

    0001089
    615 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appparallelsparallels_desktop20.2.2_\(55879\)macos-

Explore more

Back to dashboardparallels CVEsparallels_desktop vulnerabilities