CVE-2020-24574

CVE-2020-24574 affects GOG GALAXY up to version 2.0.41. The vulnerability arises in GalaxyClientService.exe via DLL injection into GalaxyClient.exe, defeating the TCP-based trusted-client protection and enabling local privilege escalation from an authenticated user to SYSTEM. Multiple sources (NV...

CVE-2022-31262

CVE-2022-31262 affects GOG Galaxy 2.0.46, with local privilege escalation due to insufficient folder permissions in %ProgramData%\GOG.com that allow hijacking the GalaxyCommunication service executable and achieving code execution as SYSTEM. Connected sources corroborate vulnerable versions 2.0.4...

CVE-2020-11827

The CVE-2020-11827 entry concerns GOG Galaxy 1.2.67, where GalaxyClientService.exe exposes weak file/service permissions that can be abused to escalate to SYSTEM privileges. According to the sources, an attacker could replace or tamper with the GalaxyClientService.exe and restart the service as a...

CVE-2020-7352

CVE-2020-7352 context : The GalaxyClientService in GOG Galaxy runs as SYSTEM on Windows. It ships with an embedded, static RSA private key and listens on localhost:9978, enabling a local attacker with user privileges to execute OS commands in elevated context via crafted inputs. The issue affects...

CVE-2019-15511

CVE-2019-15511 affects the GalaxyClientService in GOG Galaxy. Root cause: faulty/improper access control enabling unauthenticated local TCP packets to be processed, allowing local privilege escalation to SYSTEM on Windows. Affected products/versions: GOG Galaxy and GalaxyClientService before 1.2....

CVE-2018-4048

GOG Galaxy 1.2.48.36 (Windows 64-bit Installer) contains a local privilege escalation in the Temp directory permissions. By default, the Temp path allows broad access, enabling an attacker to overwrite executables used by the Desktop Galaxy Updater and execute arbitrary code with SYSTEM privilege...

CVE-2020-15528

CVE-2020-15528 affects the GOG Galaxy Client version 2.0.17. The issue is a local privilege escalation caused by weak file permissions and missing file integrity checks, enabling a non-privileged user to elevate privileges when starting or uninstalling a game. Publicly available connected documen...

CVE-2020-15529

CVE-2020-15529 affects GOG Galaxy Client 2.0.17. The issue is local privilege escalation due to weak file permissions, exploitable via opportunistic locks during game install or verify/repair operations. Documented in NVD/CNVD entries; no exploitation status or patch/version remediation details p...

CVE-2018-4052

GOG Galaxy for macOS (version 1.2.47) contains a local information-leak in the privileged helper tool. The vulnerability, fillProcessInformationForPids, lets an attacker pass a PID to obtain information normally restricted to root, exposing sensitive data. Talos-2018-0726/CVE-2018-4052 details th...

CVE-2021-26807

GalaxyClient 2.0.28.9 loads unsigned DLLs (e.g., zlib1.dll, libgcc_s_dw2-1.dll, libwinpthread-1.dll) from PATH, enabling potential local code execution through unsigned DLL loading. Root cause: unsigned DLL loading from PATH. Impact: affects local confidentiality, integrity, and availability as d...

CVE-2018-3974

GOG Galaxy 1.2.45.61 on Windows is affected by a local privilege escalation due to insecure file permissions in the install directory. An attacker can overwrite GalaxyClientService.exe, which runs as LocalSystem, enabling arbitrary code execution with system privileges at boot. Root cause: overly...

CVE-2018-4050

CVE-2018-4050 affects GOG Galaxy Games on macOS (version 1.2.47) via the privileged helper tool. The root cause is changeFolderPermissionsAtPath, which allows an attacker to globally modify folder permissions, enabling arbitrary code execution with elevated privileges. Talos and related advisorie...

CVE-2018-4049

GOG Galaxy vulnerability CVE-2018-4049 affects the Games directory. By default the Games folder grants broad permissions, allowing any user to read/write/modify files. An attacker could overwrite executables in installed games (when a privileged installer is present) and execute code with elevate...

CVE-2018-4051

GOG Galaxy Games on macOS (version 1.2.47) contains a local privilege escalation in the privileged helper tool. The vulnerability, tracked as TALOS-2018-0725 / CVE-2018-4051, arises in createFolderAtPath and allows an attacker to globally create directories and subdirectories on the root filesyst...

CVE-2018-4053

CVE-2018-4053 is a local denial-of-service in GOG Galaxy Games (macOS), affecting the privileged helper tool. Cisco Talos reports that version 1.2.47 for macOS listens on a root service and can be forced to terminate by sending malicious data; the vulnerability stems from improper handling of clo...