CVE-2026-11318 Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer
PublishedDeskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting to the root-owned service without authentication. Attackers...