What’s Vulnerable › Vulnerabilities

CVE-2020-15529

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-05 · updated 2026-06-17
• Weakness: CWE-667

Description

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks.

Affected products

• GOG.COM GOG Galaxy: 2.0.17

References

• http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html
• http://daniels-it-blog.blogspot.com/2020/07/gog-galaxy-escalation-of-privileges.html

Get alerted when CVE-2020-15529 or the next vulnerability affects your stack