high7.8
CVE-2020-15529
An issue was discovered in GOG Galaxy Client 2.0.17.
Impact
An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user installs a game or performs a verify/repair operation. The issue exists because of weak file permissions and can be exploited by using opportunistic locks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gog | Galaxy | Version 2.0.17 |