Vulnerability index

Browse CVEs

15 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Galaxy HIGH 7.8
CVE-2022-31262

An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack t…

Fix: after 2.0.51
Fix from $1,950 2022-08-17
Galaxy HIGH 7.8
CVE-2021-26807

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker t…

No fix yet
Fix from $1,950 2021-04-30
Galaxy HIGH 7.8
CVE-2020-24574

The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any au…

Fix: after 2.0.41
Fix from $1,950 2020-08-21
Galaxy HIGH 8.8
CVE-2020-7352

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embe…

Fix: after 2.0.12
Fix from $1,950 2020-08-06
Galaxy HIGH 7.8
CVE-2020-11827

In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put malicious …

Fix: 1.2.67+
Fix from $1,950 2020-07-14
Galaxy HIGH 7.8
CVE-2020-15528

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of we…

Mitigation only
Fix from $1,950 2020-07-05
Galaxy HIGH 7.8
CVE-2020-15529

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repa…

Mitigation only
Fix from $1,950 2020-07-05
Galaxy HIGH 7.8
CVE-2019-15511

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an…

Fix: 1.2.60+
Fix from $1,950 2019-11-21
Galaxy HIGH 7.8
CVE-2018-4048

An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows…

No fix yet
Fix from $1,950 2019-05-30
Galaxy HIGH 7.8
CVE-2018-3974

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overw…

No fix yet
Fix from $1,950 2019-04-02
Galaxy HIGH 7.8
CVE-2018-4049

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Wi…

Mitigation only
Fix from $1,950 2019-04-02
Galaxy MEDIUM 5.5
CVE-2018-4051

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An atta…

Mitigation only
Fix from $1,600 2019-04-02
Galaxy MEDIUM 5.5
CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker…

Mitigation only
Fix from $1,600 2019-04-02
Galaxy MEDIUM 5.5
CVE-2018-4053

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacke…

Mitigation only
Fix from $1,600 2019-04-02
Galaxy HIGH 7.8
CVE-2018-4050

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An atta…

Mitigation only
Fix from $1,950 2019-04-01