Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h3xg-rpr6-5hm7

Опубликовано: 03 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.

EPSS

Процентиль: 2%
0.00015
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-269

Связанные уязвимости

CVSS3: 6.2
nvd
2 месяца назад

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges.

EPSS

Процентиль: 2%
0.00015
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-269