Approved changes feed: RSS · Atom

cpe:2.3:a:gog:galaxy:1.2.47:*:*:*:*:macos:*:*

part: a version: 1.2.47 update: *

VendorGog (235b7362-4f97-5b35-8fed-e1aafa857b2e)
ProductGalaxy (948fe5ff-44da-5b52-b6b0-386b4c5a7a04)
Edition*
Language*
Software edition*
Target softwaremacos
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-4053 vulnerable 2026-06-08 05:11:41.620434 Details available
MEDIUM (6.2)
An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable.
Published: 2019-04-02T15:35:33.000Z
Updated: 2024-08-05T05:04:28.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4052 vulnerable 2026-06-08 05:11:41.620100 Details available
MEDIUM (6.2)
An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.
Published: 2019-04-02T15:19:41.000Z
Updated: 2024-08-05T05:04:28.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4051 vulnerable 2026-06-08 05:11:41.619661 Details available
HIGH (7.1)
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.
Published: 2019-04-02T15:19:44.000Z
Updated: 2024-08-05T05:04:29.501Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-4050 vulnerable 2026-06-08 05:11:41.619035 Details available
HIGH (7.1)
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.
Published: 2019-04-01T18:29:38.000Z
Updated: 2024-08-05T05:04:29.151Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.