CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

PT-2019-10783

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local denial-of-service issue exists, allowing an attacker to send malicious data to a root-listening service, causing the application to terminate and become unavailable. Recommendations For...

PT-2019-10782

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local information leak issue exists in the privileged helper tool, allowing an attacker to pass a PID and receive information that would usually be accessible only to the root user. Recommendatio...

CVE-2018-4053: Improper Input Validation

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable...

PT-2019-10781

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to create directories and subdirectories globally on the root file system and modify permissions of...

CVE-2018-4050: Incorrect Permission Assignment for Critical Resource

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

PT-2019-10780

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to adjust folder permissions globally. This can lead to the execution of arbitrary code with elevated...