GOG records
17 published records for vendor gog.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 5.9%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-732 Incorrect Permission Assignment for Critical Resource6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-279 Incorrect Execution-Assigned Permissions1
- CWE-281 Improper Preservation of Permissions1
- CWE-288 Authentication Bypass Using an Alternate Path or Channel1
The weakness classes this vendor ships most often: where to look.
CWEAll records
17 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-7352Weaponized | GOG Galaxy GalaxyClientService Privilege Escalationgog · galaxy · CWE-264 | High8.8 | — | 3.7% | Aug 6, 2020 |
31Monitor | CVE-2020-15528No exploit | An issue was discovered in GOG Galaxy Client 2.0.17.gog · galaxy · CWE-732 | High7.8 | — | 1.3% | Jul 4, 2020 |
31Monitor | CVE-2020-15529No exploit | An issue was discovered in GOG Galaxy Client 2.0.17.gog · galaxy · CWE-667 | High7.8 | — | 1.0% | Jul 4, 2020 |
31Monitor | CVE-2019-15511Proof of concept | An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy.gog · galaxy · CWE-306 | High7.8 | — | 0.7% | Nov 21, 2019 |
31Monitor | CVE-2020-24574No exploit | The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation frgog · galaxy · CWE-798 | High7.8 | — | 0.6% | Aug 21, 2020 |
31Monitor | CVE-2018-4048No exploit | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36gog · galaxy · CWE-668 | High7.8 | — | 0.5% | May 30, 2019 |
31Monitor | CVE-2018-3974No exploit | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory.gog · galaxy · CWE-732 | High7.8 | — | 0.5% | Apr 2, 2019 |
31Monitor | CVE-2022-31262Proof of concept | An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46.gog · galaxy · CWE-281 | High7.8 | — | 0.5% | Aug 17, 2022 |
31Monitor | CVE-2021-26807No exploit | GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an agog · galaxy · CWE-426 | High7.8 | — | 0.4% | Apr 30, 2021 |
31Monitor | CVE-2018-4050No exploit | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOSgog · galaxy · CWE-732 | High7.8 | — | 0.3% | Apr 1, 2019 |
31Monitor | CVE-2020-11827No exploit | In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe.gog · galaxy · CWE-732 | High7.8 | — | 0.3% | Jul 14, 2020 |
31Monitor | CVE-2018-4049No exploit | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.gog · galaxy · CWE-732 | High7.8 | — | 0.3% | Apr 2, 2019 |
26Monitor | CVE-2023-50914No exploit | A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authenticCWE-279 | Medium6.7 | — | 0.7% | Apr 30, 2024 |
26Monitor | CVE-2023-50915No exploit | An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite CWE-288 | Medium6.5 | — | 0.6% | Apr 30, 2024 |
22Monitor | CVE-2018-4052No exploit | An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS.gog · galaxy · CWE-200 | Medium5.5 | — | 0.3% | Apr 2, 2019 |
22Monitor | CVE-2018-4053No exploit | An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS.gog · galaxy · CWE-20 | Medium5.5 | — | 0.3% | Apr 2, 2019 |
22Monitor | CVE-2018-4051No exploit | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOSgog · galaxy · CWE-732 | Medium5.5 | — | 0.2% | Apr 2, 2019 |
- CVE-2020-735240Plan
GOG Galaxy GalaxyClientService Privilege Escalation
HighCVSS 8.8WeaponizedEPSS 3%gog · galaxyAug 6, 2020
- CVE-2020-1552831Monitor
An issue was discovered in GOG Galaxy Client 2.0.17.
HighCVSS 7.8No exploitEPSS 1%gog · galaxyJul 4, 2020
- CVE-2020-1552931Monitor
An issue was discovered in GOG Galaxy Client 2.0.17.
HighCVSS 7.8No exploitEPSS 1%gog · galaxyJul 4, 2020
- CVE-2019-1551131Monitor
An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy.
HighCVSS 7.8Proof of conceptEPSS 0%gog · galaxyNov 21, 2019
- CVE-2020-2457431Monitor
The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation fr
HighCVSS 7.8No exploitEPSS 0%gog · galaxyAug 21, 2020
- CVE-2018-404831Monitor
An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36
HighCVSS 7.8No exploitEPSS 0%gog · galaxyMay 30, 2019
- CVE-2018-397431Monitor
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory.
HighCVSS 7.8No exploitEPSS 0%gog · galaxyApr 2, 2019
- CVE-2022-3126231Monitor
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46.
HighCVSS 7.8Proof of conceptEPSS 0%gog · galaxyAug 17, 2022
- CVE-2021-2680731Monitor
GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an a
HighCVSS 7.8No exploitEPSS 0%gog · galaxyApr 30, 2021
- CVE-2018-405031Monitor
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS
HighCVSS 7.8No exploitEPSS 0%gog · galaxyApr 1, 2019
- CVE-2020-1182731Monitor
In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe.
HighCVSS 7.8No exploitEPSS 0%gog · galaxyJul 14, 2020
- CVE-2018-404931Monitor
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.
HighCVSS 7.8No exploitEPSS 0%gog · galaxyApr 2, 2019
- CVE-2023-5091426Monitor
A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentic
MediumCVSS 6.7No exploitEPSS 0%Apr 30, 2024
- CVE-2023-5091526Monitor
An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite
MediumCVSS 6.5No exploitEPSS 0%Apr 30, 2024
- CVE-2018-405222Monitor
An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS.
MediumCVSS 5.5No exploitEPSS 0%gog · galaxyApr 2, 2019
- CVE-2018-405322Monitor
An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS.
MediumCVSS 5.5No exploitEPSS 0%gog · galaxyApr 2, 2019
- CVE-2018-405122Monitor
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS
MediumCVSS 5.5No exploitEPSS 0%gog · galaxyApr 2, 2019