Vulnerability Spotlight: Multiple vulnerabilities in GOG Galaxy Games
Summary: Cisco Talos discovered six vulnerabilities in the GOG Galaxy game launcher, including insecure file permissions in its Temp and Games directories that let an attacker overwrite executables and run code with SYSTEM privileges, plus flaws in the privileged helper tool that allow global permission changes, directory creation on the root file system, information leaks from root processes, and a denial-of-service. Talos confirmed GOG Galaxy version 1.2.48.36 is affected, worked with GOG on a fix, and states there is no single workaround because the issues come from different functions and can only be fixed through the patch.
Why it matters: The Temp directory ships with full control for every user and holds a root CA alongside executables that later run as SYSTEM, so any local account on the machine is enough to reach the highest privilege level. With no workaround available, every unpatched 1.2.48.36 install stays exposed until it is updated.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2018-4048CVE-2018-4049CVE-2018-4050CVE-2018-4051
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026