GOG Galaxy Games Privileged Helper Tool Local Privilege Escalation Vulnerability

CVE-2018-4050 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.

Learn more about our Cis Benchmark Audit For Apple Macos.