CVE-2020-15528

概要

参考情報

• daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html · Third Party Advisory

galaxy のその他の脆弱性

• CVE-2022-31262高 7.8An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an attacker can…
• CVE-2021-26807高 7.8GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an a…
• CVE-2020-24574高 7.8The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation fr…
• CVE-2020-7352高 8.8The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping …
• CVE-2020-11827高 7.8In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker can put m…