CVE-2020-15529

An issue was discovered in GOG Galaxy Client 2.0.17

published July 5, 2020

CVSS
—
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Published
2020-07-05T00:31Z
EPSS history
Timeline
  • 05 JUL 00:31Z
    An issue was discovered in GOG Galaxy Client 2.0.17
    cvelistv5