Gog.Com vulnerabilities

5 vulnerabilities

Known vulnerabilities in Gog.Com products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.

Products

1
6.2CVE-2018-4053goggalaxy+1
EPSS score
0.33%
An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable.6.2CVE-2018-4052goggalaxy+1
EPSS score
0.36%
An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.7.1CVE-2018-4051goggalaxy+1
EPSS score
0.28%
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.9.3CVE-2018-4049goggalaxy+1
EPSS score
0.32%
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges.9.3CVE-2018-3974goggalaxy+1
EPSS score
0.53%
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.