CVE-2019-15511 - CVE House
Back to Database
Status published High CVE-2019-15511

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService...

Vulnerability Description

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15511

Credits & Attribution

No credits recorded in the NVD database.

References

More from gog

View All →
CVE-2022-31262
An exploitable local privilege escalation vulnerability exists in GOG Galaxy...
High 7.8
CVE-2021-26807
GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll...
High 7.8
CVE-2020-24574
The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as...
High 7.8
CVE-2020-15529
An issue was discovered in GOG Galaxy Client 2.0.17. Local...
High 7.8
CVE-2020-15528
An issue was discovered in GOG Galaxy Client 2.0.17. Local...
High 7.8

Affected Vendor

Affected Software

galaxy
Vulnerable Versions:
0, 2.0.0

Timeline

Official Publish: November 21st, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.