8 matches found
CVE-2026-11318
CVE-2026-11318: Local Privilege Escalation in DeskIn macOS Client Vendor: DeskIn Product: DeskIn macOS Client Affected Versions: = v3.3.4.3 Overview A Local Privilege Escalation LPE vulnerability has been identified in the DeskIn macOS client. This vulnerability allows an unprivileged local user ...
CVE-2026-11318
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...
CVE-2026-11318
DeskIn macOS Client versions up to 3.3.4.3 are vulnerable to a Local Privilege Escalation vulnerability. The root-owned daemon DeskIn_Service exposes a Mach XPC service, com.deskin.service.installer, which lacks proper client validation and fails to verify code signatures or entitlements. This al...
EUVD-2026-95287
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...
CVE-2026-11318 Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...
CVE-2026-11318 Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...
PT-2026-108217
Name of the Vulnerable Software and Affected Versions Deskin versions prior to 3.3.4.4 Description A privilege escalation issue exists in the com.deskin.service.installer XPC service. Local unprivileged attackers can connect to this root-owned service without authentication to execute arbitrary...
CVE-2026-11318: Missing Authentication for Critical Function
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers can invoke the...