CVE-2018-4050

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

CVE-2018-4050

CVE-2018-4050 affects GOG Galaxy Games on macOS (version 1.2.47) via the privileged helper tool. The root cause is changeFolderPermissionsAtPath, which allows an attacker to globally modify folder permissions, enabling arbitrary code execution with elevated privileges. Talos and related advisorie...