CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS

Medium · published April 2, 2019

CVSS v3.0
6.2
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user.

The record
Technical detail
CVSS v3.0
6.2 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00357 · 28.0th percentile
Published
2019-04-02T15:19Z
EPSS history
Timeline
  • 02 APR 15:19Z
    An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS
    cvelistv5