| Package | Affected versions | Patched versions |
|---|---|---|
| galaxy | ≥ 2.0.46, ≤ 2.0.51 |
An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can hijack the %ProgramData%\GOG.com folder structure and change the GalaxyCommunication service executable to a malicious file, resulting in code execution as SYSTEM.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free