EUVD-2020-4167

Malware in sbrugna...

CVE-2020-11827

In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. After that, the attacker can re-start this service as an unprivileged user to escalate his/her...

CVE-2023-50915: Authentication Bypass Using an Alternate Path or Channel

An issue exists in GalaxyClientService.exe in GOG Galaxy Beta 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service...

CVE-2023-50915

An issue exists in GalaxyClientService.exe in GOG Galaxy Beta 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service...

CVE-2023-50914

GOG Galaxy (Beta) versions 2.0.67.2 through v2.0.71.2 are vulnerable to a Local Privilege Escalation (LPE) issue within its inter-process communication (IPC) procedure. The root cause is a design flaw allowing an authenticated local user to modify the FixDirectoryPrivileges instruction parameters...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914: Incorrect Execution-Assigned Permissions

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2020-24574: Use of Hard-coded Credentials

The client aka GalaxyClientService.exe in GOG GALAXY through 2.0.41 as of 12:58 AM Eastern, 9/26/21 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into...

CVE-2020-11827

The CVE-2020-11827 entry concerns GOG Galaxy 1.2.67, where GalaxyClientService.exe exposes weak file/service permissions that can be abused to escalate to SYSTEM privileges. According to the sources, an attacker could replace or tamper with the GalaxyClientService.exe and restart the service as a...

CVE-2020-11827: Incorrect Permission Assignment for Critical Resource

In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious code in a Trojan horse GalaxyClientService.exe. After that, the attacker can re-start this service as an unprivileged user to escalate his/her...