CoreCVE
Back

HIGH

An issue was discovered in GOG Galaxy Client 2.0.17

Published Jul 5, 2020

Description

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 5, 2020
Updated Aug 4, 2024
Reserved Jul 5, 2020
Link CVE-2020-15528
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-15528
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-15528
ENISA EUVD
Assigner mitre
Published Jul 5, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-7515
EUVD-2020-7515