CVE-2025-62686 - Plugin Alliance Installation Manager DYLD Injection Privilege Escalation

CVE ID : CVE-2025-62686 Published : Dec. 3, 2025, 5:15 p.m. | 1 hour, 14 minutes ago Description : A local privilege escalation vulnerability exists in the Plugin Alliance InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 on macOS. Due to the absence of a hardened runtime and a __RESTRICT segment, a local user may exploit the DYLD_INSERT_LIBRARIES environment variable to inject a dynamic library, potentially resulting in code execution with elevated privileges. Severity: 6.2 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor