GCVE - cpe:2.3:a:plugin-alliance:installation

Approved changes feed: RSS · Atom

cpe:2.3:a:plugin-alliance:installation_manager:1.4.0:*:*:*:*:*:*:*

part: a version: 1.4.0 update: *

Vendor	Plugin Alliance (`3336e220-d4a7-5c1f-bce9-59e99584a115`)
Product	Installation Manager (`1dd5bb12-c5f9-53c2-8dc0-34cf34a36e3f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-62686`	vulnerable	2026-06-08 07:39:16.451505	Details available A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges. Published: 2025-12-03T00:00:00.000Z Updated: 2025-12-03T16:33:29.749Z Open on db.gcve.eu Reference links https://almightysec.com/plugin-alliance-installationhelper-dylib-injection/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-55076`	vulnerable	2026-06-08 07:33:14.035863	Details available A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system(), which may allow a local user to execute arbitrary commands with root privileges. Published: 2025-12-03T00:00:00.000Z Updated: 2025-12-03T16:34:25.837Z Open on db.gcve.eu Reference links https://almightysec.com/plugin-alliance-helpertool-xpc-service-local-privilege-escalation/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.