← Back

Plugin Alliance

plugin-alliance

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Installation Manager
installation_manager
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-62686
1Plugin Alliance
1Installation Manager
Dec 18, 2025
Dec 3, 2025
N/A· v4
6.2 MEDIUM· v3
N/A· v2
A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RES...Show more
A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.Show less
CVE-2025-55076
1Plugin Alliance
1Installation Manager
Dec 18, 2025
Dec 3, 2025
N/A· v4
6.2 MEDIUM· v3
N/A· v2
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes in...Show more
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges.Show less