CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

CVE-2023-50914

GOG Galaxy (Beta) versions 2.0.67.2 through v2.0.71.2 are vulnerable to a Local Privilege Escalation (LPE) issue within its inter-process communication (IPC) procedure. The root cause is a design flaw allowing an authenticated local user to modify the FixDirectoryPrivileges instruction parameters...

CVE-2023-50914

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy Beta 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction...

Directory Traversal

gnome-autoar is vulnerable to information disclosure. The autoar-extractor.c module allows an attacker to exploit a directory traversal vulnerability during extraction as it lacks symlink validation, resulting in writing of files in arbitrary system directories...