Known Vulnerabilities for products from Gog
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Gog".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-31262 json | An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, ... | 7.8 - HIGH | 2022-08-17 | 2022-10-28 |
| CVE-2021-26807 json | GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, wh... | 7.8 - HIGH | 2021-04-30 | 2021-05-12 |
| CVE-2020-24574 json | The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privileg... | 7.8 - HIGH | 2020-08-21 | 2022-04-29 |
| CVE-2020-15529 json | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game o... | 7.8 - HIGH | 2020-07-05 | 2021-07-21 |
| CVE-2020-15528 json | An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninsta... | 7.8 - HIGH | 2020-07-05 | 2021-07-21 |
| CVE-2020-11827 json | In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An att... | 7.8 - HIGH | 2020-07-14 | 2021-07-21 |
| CVE-2020-7352 json | The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the sof... | 8.8 - HIGH | 2020-08-06 | 2022-08-05 |
| CVE-2019-15511 json | An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Imp... | 7.8 - HIGH | 2019-11-21 | 2021-07-21 |
| CVE-2018-4053 json | An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.... | 5.5 - MEDIUM | 2019-04-02 | 2022-06-07 |
| CVE-2018-4052 json | An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.4... | 5.5 - MEDIUM | 2019-04-02 | 2022-06-07 |
| CVE-2018-4051 json | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1... | 5.5 - MEDIUM | 2019-04-02 | 2022-06-07 |
| CVE-2018-4050 json | An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1... | 7.8 - HIGH | 2019-04-01 | 2022-06-07 |
| CVE-2018-4049 json | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” dire... | 7.8 - HIGH | 2019-04-02 | 2022-06-07 |
| CVE-2018-4048 json | An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG G... | 7.8 - HIGH | 2019-05-30 | 2022-06-07 |
| CVE-2018-3974 json | An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install director... | 7.8 - HIGH | 2019-04-02 | 2023-02-02 |
Known software with vulnerabilities from Gog
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Gog | Galaxy | - |