Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

desktop — Vulnerabilities & Security Advisories 84

All 84 CVE vulnerabilities found in desktop, with AI-generated Chinese analysis, references, and POCs.

Vendor: Parallels

CVE IDTitleCVSSSeverityPublished
CVE-2026-7701 Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference CWE-476 4.3 Medium2026-05-03
CVE-2025-14414 Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AIHighAI2025-12-23
CVE-2025-14415 Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 8.8AIHighAI2025-12-23
CVE-2025-14413 Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability CWE-22 7.8AIHighAI2025-12-23
CVE-2025-14412 Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AIHighAI2025-12-23
CVE-2025-14411 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14410 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14409 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AIHighAI2025-12-23
CVE-2025-14408 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AIMediumAI2025-12-23
CVE-2025-14407 Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability CWE-119 5.5AIMediumAI2025-12-23
CVE-2025-14406 Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CWE-427 7.8AIHighAI2025-12-23
CVE-2025-14498 TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability CWE-427 7.8AIHighAI2025-12-23
CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure CWE-200 3.3 Low2025-05-21
CVE-2025-0413 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 -2025-02-04
CVE-2025-23040 Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop CWE-522 6.6 Medium2025-01-15
CVE-2024-6154 Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability CWE-122 8.2AIHighAI2024-06-20
CVE-2024-6153 Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability CWE-693 7.1AIHighAI2024-06-20
CVE-2023-50228 Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability CWE-347 7.8 -2024-05-03
CVE-2023-50227 Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 8.6 -2024-05-03
CVE-2023-50226 Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 -2024-05-03
CVE-2023-27328 Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability CWE-91 8.8 -2024-05-03
CVE-2023-27327 Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability CWE-367 7.5 -2024-05-03
CVE-2023-27326 Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability CWE-22 8.2 -2024-05-03
CVE-2023-27325 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 -2024-05-03
CVE-2023-27324 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 -2024-05-03
CVE-2023-27323 Parallels Desktop Updater Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability CWE-367 7.0AIHighAI2024-05-03
CVE-2023-27322 Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8AIHighAI2024-05-03
CVE-2023-40168 Malicious projects can read and upload arbitrary files from disk in TurboWarp Desktop CWE-863 7.4 High2023-08-17
CVE-2022-34892 Corel Parallels Desktop 竞争条件问题漏洞 CWE-362 7.8 -2022-07-18
CVE-2022-34891 Corel Parallels Desktop 安全漏洞 CWE-732 7.8 -2022-07-15

All 84 known CVE vulnerabilities affecting desktop with full Chinese analysis, references, and POCs where available.