Gog Galaxy
Approved changes feed: RSS · Atom
cpe:2.3:a:gog.com:gog_galaxy:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Gog.Com (17b6ae93-bf02-5163-ad5c-3349b5eeacd4) |
|---|---|
| Product | Gog Galaxy (225c0af9-66fd-5dbd-ba91-1ddcdbac58a4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-4053 |
vulnerable | 2026-06-08 05:11:41.620402 |
Details available
MEDIUM (6.2)
An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable.
Published: 2019-04-02T15:35:33.000Z
Updated: 2024-08-05T05:04:28.770Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4052 |
vulnerable | 2026-06-08 05:11:41.619975 |
Details available
MEDIUM (6.2)
An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.
Published: 2019-04-02T15:19:41.000Z
Updated: 2024-08-05T05:04:28.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4051 |
vulnerable | 2026-06-08 05:11:41.619617 |
Details available
HIGH (7.1)
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.
Published: 2019-04-02T15:19:44.000Z
Updated: 2024-08-05T05:04:29.501Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-4049 |
vulnerable | 2026-06-08 05:11:41.617263 |
Details available
CRITICAL (9.3)
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory, version 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of installed games to exploit this vulnerability and execute arbitrary code with elevated privileges.
Published: 2019-04-02T15:35:37.000Z
Updated: 2024-08-05T05:04:29.492Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-3974 |
vulnerable | 2026-06-08 05:11:41.508744 |
Details available
CRITICAL (9.3)
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.
Published: 2019-04-02T15:19:37.000Z
Updated: 2024-08-05T04:57:24.476Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.