CVE-2020-15528

Name of the Vulnerable Software and Affected Versions GOG Galaxy Client version 2.0.17

Description An issue in the GOG Galaxy Client allows for local escalation of privileges. This occurs when a user starts or uninstalls a game due to weak file permissions and missing file integrity checks.

Recommendations For GOG Galaxy Client version 2.0.17, update to a newer version that addresses the weak file permissions and missing file integrity checks to prevent local escalation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.