CVE-2025-55076

A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The root cause is that the service accepts unauthenticated XPC connections and executes input via the system() function. This flaw could allow a...

CVE-2025-62686

A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service, which is included with Plugin Alliance Installation Manager v1.4.0 on macOS . The root cause is the absence of a hardened runtime and a RESTRICT segment , allowing a local user to exploit the DYL...