What’s Vulnerable › Vulnerabilities

CVE-2020-15528

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-05 · updated 2026-06-17
• Weakness: CWE-732

Description

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks.

Affected products

• GOG.COM GOG Galaxy: 2.0.17

References

• http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html
• http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html

Get alerted when CVE-2020-15528 or the next vulnerability affects your stack