CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4052

GOG Galaxy for macOS (version 1.2.47) contains a local information-leak in the privileged helper tool. The vulnerability, fillProcessInformationForPids, lets an attacker pass a PID to obtain information normally restricted to root, exposing sensitive data. Talos-2018-0726/CVE-2018-4052 details th...