EUVD-2021-13594

Malware in sbrugna...

CVE-2021-26807

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgccsdw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading...

CVE-2021-26807

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgccsdw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading...

Design/Logic Flaw

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgccsdw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading...

CVE-2021-26807

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgccsdw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading...

CVE-2021-26807

GalaxyClient 2.0.28.9 loads unsigned DLLs (e.g., zlib1.dll, libgcc_s_dw2-1.dll, libwinpthread-1.dll) from PATH, enabling potential local code execution through unsigned DLL loading. Root cause: unsigned DLL loading from PATH. Impact: affects local confidentiality, integrity, and availability as d...

CVE-2021-26807: Untrusted Search Path

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgccsdw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading...

PT-2021-17142

Name of the Vulnerable Software and Affected Versions GalaxyClient version 2.0.28.9 Description The issue allows an attacker to potentially run code locally through unsigned DLL loading, as GalaxyClient loads unsigned DLLs such as zlib1.dll, libgcc s dw2-1.dll, and libwinpthread-1.dll from the...

GOG GALAXY local elevation of privilege vulnerability (CNVD-2020-49265)

GOG Galaxy is a gaming client for managing games, chatting with friends and more. A local elevation of privilege vulnerability exists in the client in GOG GALAXY 2.0.19. The vulnerability stems from an attacker being able to inject a DLL into GalaxyClient.exe, which can be used to compromise the...