en
Parallels is a global software company operating in virtualization, remote application and desktop delivery, and digital workspace technology. Its mission is to help users and organizations access operating systems, applications, and desktops across diverse devices and cloud environments.
As of 10/23/2026, Parallels recorded 4 security vulnerabilities in the last 90 days across 2 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, RAS Client had the most security vulnerabilities in the Parallels ecosystem, with 3 vulnerabilities—approximately 75% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-90894Parallels Desktop local privilege escalation via appliance extract argument injectionCVE-2026-18263Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation VulnerabilityCVE-2026-18262Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation VulnerabilityCVE-2026-13121Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation VulnerabilityCVE-2024-52561CVE-2024-52561160 Results | Page 1 of 16
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |