CVE-2025-56232

all versions

GOG Galaxy 2.0.0.2 suffers from Missing SSL Certificate Validation. An attacker who controls the local network, DNS, or a proxy ca

6.8MEDIUM

CVE-2022-31262

>= 2.0.46 and <= 2.0.51

An exploitable local privilege escalation vulnerability exists in GOG Galaxy 2.0.46. Due to insufficient folder permissions, an at

7.8HIGH

CVE-2021-26807

all versions

GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which a

7.8HIGH

CVE-2020-24574

>= 2.0.13 and <= 2.0.41

The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege esc

7.8HIGH

CVE-2020-7352

>= 1.2.0 and <= 1.2.64

The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software

8.4HIGH

CVE-2020-11827

< 1.2.67

In GOG Galaxy 1.2.67, there is a service that is vulnerable to weak file/service permissions: GalaxyClientService.exe. An attacker

7.8HIGH

CVE-2020-15529

all versions

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or per

7.8HIGH

CVE-2020-15528

all versions

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a

7.8HIGH

CVE-2019-15511

< 1.2.60

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper

7.8HIGH

CVE-2018-4048

all versions

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy

7.8HIGH

CVE-2018-4053

all versions

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 fo

5.5MEDIUM

CVE-2018-4052

all versions

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for

5.5MEDIUM

CVE-2018-4051

all versions

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47

5.5MEDIUM

CVE-2018-4049

all versions

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's “Games” directory

7.8HIGH

CVE-2018-3974

all versions

An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy's install directory. An

7.8HIGH

CVE-2018-4050

all versions

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47

7.8HIGH