CVE-2018-4050 Vulnerability Details

  /     /     /  

CVE-2018-4050 Metadata Quick Info

CVE Published: 01/04/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: talos | Vendor: Talos | Product: GOG Galaxy
Status : PUBLISHED

---

CVE-2018-4050 Description

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy\'s Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: local privilege escalation
Source: Talos

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).