Potential File Corruption Vulnerability in GOG Galaxy Client

CVE-2023-50915

What is CVE-2023-50915?

A significant vulnerability has been identified in the GOG Galaxy client, specifically within the GalaxyClientService.exe process. This vulnerability allows authenticated users using versions 2.0.67.2 to 2.0.71.2 of GOG Galaxy (Beta) to exploit a combination of NTFS Junctions and RPC Object Manager symbolic links. This exploitation can lead to an overwrite of critical system files, potentially resulting in service disruption and downtime. Users are encouraged to review their security measures and apply necessary updates to mitigate this risk.

References