VULNERABILITY INTELLIGENCE

CVE-2018-4050

CVSS score7.8 HIGH
EPSS probability0.35%
CISA KEVNot currently listed
Published2019-04-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references