« Volver al listado

CVE-2023-50914

Estado: AplazadaMedia (6.7)—

A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction parameters sent from GalaxyClient.exe to GalaxyClientService.exe.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

GOG — GalaxyAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-50914",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-50914",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-16T19:16:30.967116Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.5,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:gog:galaxy:-:*:*:*:*:*:*:*"
          ],
          "vendor": "gog",
          "product": "galaxy",
          "versions": [
            {
              "status": "affected",
              "version": "2.0.67.2",
              "versionType": "custom",
              "lessThanOrEqual": "v2.071.2"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-04-30T14:15:10.820",
  "references": [
    {
      "url": "https://github.com/anvilsecure/gog-galaxy-app-research",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/anvilsecure/gog-galaxy-app-research/blob/main/advisories/CVE-2023-50914%20-%20LPE.md",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.gog.com/hc/en-us/categories/201553005-Downloads-Installing?product=gog",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://github.com/anvilsecure/gog-galaxy-app-research",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://github.com/anvilsecure/gog-galaxy-app-research/blob/main/advisories/CVE-2023-50914%20-%20LPE.md",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.gog.com/hc/en-us/categories/201553005-Downloads-Installing?product=gog",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-279"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitrary system directories to include Everyone full control permissions by modifying the FixDirectoryPrivileges instruction parameters sent from GalaxyClient.exe to GalaxyClientService.exe."
    },
    {
      "lang": "es",
      "value": "Un problema de escalada de privilegios en el procedimiento de comunicación entre procesos desde GOG Galaxy (Beta) 2.0.67.2 hasta v2.0.71.2 permite a los usuarios autenticados cambiar el DACL de directorios arbitrarios del sistema para incluir permisos de control total para todos modificando los parámetros de instrucción FixDirectoryPrivileges enviados. de GalaxyClient.exe a GalaxyClientService.exe."
    }
  ],
  "lastModified": "2026-06-17T06:40:12.727",
  "sourceIdentifier": "cve@mitre.org"
}