Browse CVEs

HIGH 7.8 CVE-2022-31262 An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack t… Galaxy after 2.0.51 Fix from $1,9502022-08-17 HIGH 7.8 CVE-2021-26807 GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker t… Galaxy No fix yet Fix from $1,9502021-04-30 HIGH 7.8 CVE-2020-24574 The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any au… Galaxy after 2.0.41 Fix from $1,9502020-08-21 HIGH 8.8 CVE-2020-7352 The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embe… Galaxy after 2.0.12 Fix from $1,9502020-08-06 HIGH 7.8 CVE-2020-11827 In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious … Galaxy 1.2.67+ Fix from $1,9502020-07-14 HIGH 7.8 CVE-2020-15528 An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of we… Galaxy Mitigation only Fix from $1,9502020-07-05 HIGH 7.8 CVE-2020-15529 An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repa… Galaxy Mitigation only Fix from $1,9502020-07-05 HIGH 7.8 CVE-2019-15511 An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an… Galaxy 1.2.60+ Fix from $1,9502019-11-21 HIGH 7.8 CVE-2018-4048 An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows… Galaxy No fix yet Fix from $1,9502019-05-30 HIGH 7.8 CVE-2018-3974 An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overw… Galaxy No fix yet Fix from $1,9502019-04-02 HIGH 7.8 CVE-2018-4049 An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Wi… Galaxy Mitigation only Fix from $1,9502019-04-02 MEDIUM 5.5 CVE-2018-4051 An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An atta… Galaxy Mitigation only Fix from $1,6002019-04-02 MEDIUM 5.5 CVE-2018-4052 An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker… Galaxy Mitigation only Fix from $1,6002019-04-02 MEDIUM 5.5 CVE-2018-4053 An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacke… Galaxy Mitigation only Fix from $1,6002019-04-02 HIGH 7.8 CVE-2018-4050 An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An atta… Galaxy Mitigation only Fix from $1,9502019-04-01