Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

desktop — Vulnerabilities & Security Advisories 89

All 89 CVE vulnerabilities found in desktop, with AI-generated Chinese analysis, references, and POCs.

This page aggregates Common Weakness Enumeration (CWE) vulnerabilities associated with the Desktop product line from its respective vendor. It compiles a comprehensive collection of security issues affecting this software category, focusing on critical flaws in application logic, interface handling, and system integration. The database covers vulnerability disclosures ranging from early 2020 through the present day, ensuring that users have access to both historical data and recent security updates. By consolidating these records, the platform allows security professionals and IT administrators to efficiently track vendor advisories as they are released, providing timely insights into emerging threats. Users can also gain a deeper understanding of specific weakness classes by analyzing how they manifest in desktop environments, which aids in better risk assessment and mitigation strategies. Furthermore, the page serves as a reference tool for looking up a specific product’s vulnerability history, enabling teams to review past incidents and evaluate the effectiveness of previous remediation efforts. This structured approach supports proactive security management by highlighting trends and recurring patterns in desktop software security. Whether you are investigating a specific CVE or conducting a broad analysis of the product’s security posture, this resource offers a centralized view of the threats that impact desktop applications. The information presented is designed to facilitate informed decision-making and enhance overall system resilience against known exploitation techniques.

Vendor: Parallels

CVE IDTitleCVSSSeverityPublished
CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing CWE-451--2026-07-15
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction CWE-266--2026-07-09
CVE-2026-44659 Zen Browser Mac - Address Bar Spoofing via Long Subdomain CWE-451 4.7 Medium2026-05-11
CVE-2026-44658 Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation CWE-20 2.4 Low2026-05-11
CVE-2026-41431 Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted CWE-347 8.0 High2026-05-11
CVE-2026-7701 Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference CWE-476 4.3 Medium2026-05-03
CVE-2025-14414 Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AIHighAI2025-12-23
CVE-2025-14415 Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 8.8AIHighAI2025-12-23
CVE-2025-14413 Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability CWE-22 7.8AIHighAI2025-12-23
CVE-2025-14412 Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AIHighAI2025-12-23
CVE-2025-14411 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14410 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14409 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2025-12-23
CVE-2025-14408 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14407 Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability CWE-119 5.5AIMediumAI2025-12-23
CVE-2025-14406 Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CWE-427 7.8AIHighAI2025-12-23
CVE-2025-14498 TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability CWE-427 7.8AIHighAI2025-12-23
CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure CWE-200 3.3 Low2025-05-21
CVE-2025-0413 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 -2025-02-04
CVE-2025-23040 Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop CWE-522 6.6 Medium2025-01-15
CVE-2024-6154 Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability CWE-122 8.2AIHighAI2024-06-20
CVE-2024-6153 Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability CWE-693 7.1AIHighAI2024-06-20
CVE-2023-50228 Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability CWE-347 7.8 -2024-05-03
CVE-2023-50227 Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 8.6 -2024-05-03
CVE-2023-50226 Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 -2024-05-03
CVE-2023-27328 Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability CWE-91 8.8 -2024-05-03
CVE-2023-27327 Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability CWE-367 7.5 -2024-05-03
CVE-2023-27326 Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability CWE-22 8.2 -2024-05-03
CVE-2023-27325 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 -2024-05-03
CVE-2023-27324 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 -2024-05-03

All 89 known CVE vulnerabilities affecting desktop with full Chinese analysis, references, and POCs where available.