Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cxcg-fx4q-4w62

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges.

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges.

EPSS

Процентиль: 17%
0.00053
Низкий

7.8 High

CVSS3

Дефекты

CWE-668

Связанные уязвимости

CVSS3: 7.8
nvd
больше 6 лет назад

An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges.

EPSS

Процентиль: 17%
0.00053
Низкий

7.8 High

CVSS3

Дефекты

CWE-668