Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-50915 EUVD-2023-55646GHSA-gqfm-c246-rhqp

An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite…

Published Apr 30, 2024 · Updated Mar 28, 2025 · Assigned by mitre

Description

An issue exists in GalaxyClientService.exe in GOG Galaxy (Beta) 2.0.67.2 through 2.0.71.2 that could allow authenticated users to overwrite and corrupt critical system files via a combination of an NTFS Junction and an RPC Object Manager symbolic link and could result in a denial of service.

References