Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 15:40:46 +0000 cnvd-2020-49265 https://cve.radiocsirt.org/vuln/cnvd-2020-49265 cnvd-2020-49265 https://cve.radiocsirt.org/vuln/cnvd-2020-49265 EUVD-2026-45226 https://cve.radiocsirt.org/vuln/euvd-2026-45226 EUVD-2026-45226 https://cve.radiocsirt.org/vuln/euvd-2026-45226 fkie_cve-2020-24574 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24574 <p>The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based &#34;trusted client&#34; protection mechanism.</p> <p>The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based &#34;trusted client&#34; protection mechanism.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24574 GHSA-p249-vr5g-ff3h https://cve.radiocsirt.org/vuln/ghsa-p249-vr5g-ff3h <p>The client (aka GalaxyClientService.exe) in GOG GALAXY 2.0.19 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based &#34;trusted client&#34; protection mechanism.</p> <p>The client (aka GalaxyClientService.exe) in GOG GALAXY 2.0.19 allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based &#34;trusted client&#34; protection mechanism.</p> https://cve.radiocsirt.org/vuln/ghsa-p249-vr5g-ff3h gsd-2020-24574 https://cve.radiocsirt.org/vuln/gsd-2020-24574 gsd-2020-24574 https://cve.radiocsirt.org/vuln/gsd-2020-24574