Local Privilege Escalation Vulnerability in GOG Galaxy by GOG
CVE-2022-31262

7.8HIGH

Key Information:

Vendor: Gog
Status: Galaxy
Vendor: CVE Published:; 17 August 2022

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2022-31262?

An exploitable local privilege escalation vulnerability allows attackers to manipulate insufficient folder permissions in GOG Galaxy 2.0.46. By targeting the %ProgramData%\GOG.com folder, an attacker can alter the GalaxyCommunication service executable to execute malicious files with SYSTEM privileges, which can lead to significant security compromises. It is crucial for users and administrators to be aware of this issue and implement necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2022-31262
Created by secure-77