TI-2026-69658 CVE-2026-11318 · GHSA-hvrh-p54p-hg8c
Deskin XPC Service Privilege Escalation via Unauthenticated Installer
Priority HIGH 72
Deskin through 3.3.4.3 contains a privilege escalation vulnerability in the com.deskin.service.installer XPC service that allows local unprivileged attackers to execute arbitrary installer packages as root by connecting…