CVE-2018-4051

MEDIUM

GOG Galaxy 1.2.47 - Local Privilege Escalation via Privileged Helper Tool

Title source: llm
STIX 2.1

Description

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0028
EPSS Percentile 19.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-732
Status published
Products (1)
gog/galaxy 1.2.47
Published Apr 02, 2019
Tracked Since Feb 18, 2026