ZDI-CAN-28885
HIGH 7.8
Upcoming
Feb 25, 2026
Parallels
Parallels, a well-known provider of virtualization and desktop management software, has a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, with no user interaction needed, resulting in potential compromise of confidentiality, integrity, and availability. Security teams should monitor for this vulnerability's details upon disclosure in June 2026 and prioritize patching Parallels products in environments where non-administrative users have system access.
Advisory Details
Researcher
khongtrang
Reported
February 25, 2026
Deadline
June 25, 2026
70d
CVSS Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H