CVE-2024-34331: Parallels Desktop

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

A lack of code signature verification in Parallels Desktop for Mac v19.3.0 and below allows attackers to escalate privileges via a crafted macOS installer, because Parallels Service is setuid root.

Affected products

• Parallels Parallels Desktop: up to and including 19.3.0

Published 2024-09-23. Last modified 2026-06-17.