Description (CNA)
An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An attacker can overwrite an executable that is launched as a system service on boot by default to exploit this vulnerability and execute arbitrary code with system privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| GOG.COM / GOG Galaxy | affected Gog Galaxy 1.2.45.61 (Windows 64-bit Installer) |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.