CVE-2020-15528: Gog Galaxy

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in GOG Galaxy Client 2.0.17. Local escalation of privileges is possible when a user starts or uninstalls a game because of weak file permissions and missing file integrity checks.

Affected products

• Gog Galaxy: version 2.0.17 only

Published 2020-07-05. Last modified 2026-06-17.