Security Advisory

CVE-2018-4048

7.8
HIGH

Vulnerability Description

An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36 (Windows 64-bit Installer). An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges.
Published Date May 30, 2019
Official Source NIST NVD Advisory