Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Desktop — Vulnerabilities & Security Advisories 89

All 89 CVE vulnerabilities found in Desktop, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the Desktop product category, covering various vendors, associated weakness types, and common security tags. It collects documented flaws spanning recent advisory cycles, focusing on operational systems and client-side applications. Readers can use this hub to track a specific vendor's published advisories, analyze the characteristics of a particular weakness class, or review the complete vulnerability history for a given product. The data helps security teams identify patterns in desktop software weaknesses without needing to parse individual vendor bulletins manually.

Vendor: Parallels

CVE ID Title CVSS Severity Published
CVE-2026-45150 Zen Browser - Missing Fullscreen Security Notification Allows Origin Spoofing CWE-451 - - 2026-07-15
CVE-2026-57501 Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction CWE-266 - - 2026-07-09
CVE-2026-44659 Zen Browser Mac - Address Bar Spoofing via Long Subdomain CWE-451 4.7 Medium 2026-05-11
CVE-2026-44658 Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation CWE-20 2.4 Low 2026-05-11
CVE-2026-41431 Zen Browser MAR updater ships with signature verification removed — unsigned updates accepted CWE-347 8.0 High 2026-05-11
CVE-2026-7701 Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference CWE-476 4.3 Medium 2026-05-03
CVE-2025-14414 Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AI High AI 2025-12-23
CVE-2025-14415 Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 8.8AI High AI 2025-12-23
CVE-2025-14413 Soda PDF Desktop CBZ File Parsing Directory Traversal Remote Code Execution Vulnerability CWE-22 7.8AI High AI 2025-12-23
CVE-2025-14412 Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability CWE-356 7.8AI High AI 2025-12-23
CVE-2025-14411 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AI Medium AI 2025-12-23
CVE-2025-14410 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AI Medium AI 2025-12-23
CVE-2025-14409 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 7.8AI High AI 2025-12-23
CVE-2025-14408 Soda PDF Desktop PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CWE-125 5.5AI Medium AI 2025-12-23
CVE-2025-14407 Soda PDF Desktop PDF File Parsing Memory Corruption Information Disclosure Vulnerability CWE-119 5.5AI Medium AI 2025-12-23
CVE-2025-14406 Soda PDF Desktop Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CWE-427 7.8AI High AI 2025-12-23
CVE-2025-14498 TradingView Desktop Electron Uncontrolled Search Path Local Privilege Escalation Vulnerability CWE-427 7.8AI High AI 2025-12-23
CVE-2025-48064 GitHub Desktop vulnerable to maliciously crafted file renames leading to information disclosure CWE-200 3.3 Low 2025-05-21
CVE-2025-0413 Parallels Desktop Technical Data Reporter Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 - 2025-02-04
CVE-2025-23040 Maliciously crafted remote URLs could lead to credential leak in GitHub Desktop CWE-522 6.6 Medium 2025-01-15
CVE-2024-6154 Parallels Desktop Toolgate Heap-based Buffer Overflow Local Privilege Escalation Vulnerability CWE-122 8.2AI High AI 2024-06-20
CVE-2024-6153 Parallels Desktop Updater Protection Mechanism Failure Software Downgrade Vulnerability CWE-693 7.1AI High AI 2024-06-20
CVE-2023-50228 Parallels Desktop Updater Improper Verification of Cryptographic Signature Local Privilege Escalation Vulnerability CWE-347 7.8 - 2024-05-03
CVE-2023-50227 Parallels Desktop virtio-gpu Out-Of-Bounds Write Remote Code Execution Vulnerability CWE-787 8.6 - 2024-05-03
CVE-2023-50226 Parallels Desktop Updater Link Following Local Privilege Escalation Vulnerability CWE-59 7.8 - 2024-05-03
CVE-2023-27328 Parallels Desktop Toolgate XML Injection Local Privilege Escalation Vulnerability CWE-91 8.8 - 2024-05-03
CVE-2023-27327 Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability CWE-367 7.5 - 2024-05-03
CVE-2023-27326 Parallels Desktop Toolgate Directory Traversal Local Privilege Escalation Vulnerability CWE-22 8.2 - 2024-05-03
CVE-2023-27325 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 - 2024-05-03
CVE-2023-27324 Parallels Desktop Updater Improper Initialization Local Privilege Escalation Vulnerability CWE-665 7.8 - 2024-05-03

All 89 known CVE vulnerabilities affecting Desktop with full Chinese analysis, references, and POCs where available.