CVE-2025-31359

creationtimestamp| type| source ---|---|--- 2025-06-03 10:00:25+00:00| seen| https://infosec.place/objects/104ee2eb-9453-422b-aeae-6566c36c31e7 2025-06-03 10:23:15+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqp2zma57lt2 2025-06-03...

CVE-2025-31359

A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac version 20.2.2 55879. This vulnerability can be exploited by an attacker to write to arbitrary files, potentially leading to privilege escalation...

Parallels Desktop prl_packer_inplace PVMP Unpack Directory Traversal Privilege Escalation

Talos Vulnerability Report TALOS-2025-2160 Parallels Desktop prlpackerinplace PVMP Unpack Directory Traversal Privilege Escalation June 3, 2025 CVE Number CVE-2025-31359 SUMMARY A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac...