CVE-2019-15511 Privilege escalation in n/a

What is CVE-2019-15511?

CVE-2019-15511 is a high-severity vulnerability in n/a, published on 21 Nov 2019. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected.

Weakness: CWE-306

Which versions are affected by CVE-2019-15511?

It affects 1 product.

Products include Gog Galaxy.

How do I fix CVE-2019-15511?

No fix has been published for CVE-2019-15511 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-15511 being exploited?

There is no known exploitation of CVE-2019-15511 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

Other vulnerabilities in n/a

• CVE-2018-4048 Privilege escalation in GOG Galaxy Critical 9.3
• CVE-2018-3974 Privilege escalation in GOG Galaxy Critical 9.3
• CVE-2018-4049 Privilege escalation in GOG Galaxy Critical 9.3
• CVE-2020-7352 GOG Galaxy GalaxyClientService Privilege Escalation High 8.4
• CVE-2022-31262 Privilege escalation in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-27xc-49hc-r9xm.