CVE-2025-31359: Path Traversal
A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 (55879). This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-31359?
CVE-2025-31359 is identified as a high-severity directory traversal vulnerability.
How does CVE-2025-31359 impact Parallels Desktop for Mac?
CVE-2025-31359 allows an attacker to exploit a directory traversal flaw to write to arbitrary files, which can lead to privilege escalation.
How do I fix CVE-2025-31359?
To fix CVE-2025-31359, update Parallels Desktop for Mac to the latest version that addresses this vulnerability.
Which versions of Parallels Desktop for Mac are affected by CVE-2025-31359?
CVE-2025-31359 affects Parallels Desktop for Mac version 20.2.2 (55879).
What can be done to mitigate the risks of CVE-2025-31359?
Mitigation measures for CVE-2025-31359 include restricting access to the affected software and applying the latest security updates promptly.