CVE-2019-15511

An exploitable local privilege escalation vulnerability exists in the GalaxyClientService installed by GOG Galaxy. Due to Improper Access Control, an attacker can send unauthenticated local TCP packets to the service to gain SYSTEM privileges in Windows system where GOG Galaxy software is installed. All GOG Galaxy versions before 1.2.60 and all corresponding versions of GOG Galaxy 2.0 Beta are affected.

• CWE-306

• https://cqureacademy.com/cqure-labs/cqlabs-cve-2019-15511-broken-access-control-in-gog-galaxyThird Party Advisory, Vendor Advisory
• https://support.gog.com/hc/en-us/articles/360025458833-GOG-GALAXY-2-0-updates-and-known-issuesRelease Notes, Vendor Advisory
• https://cqureacademy.com/cqure-labs/cqlabs-cve-2019-15511-broken-access-control-in-gog-galaxyThird Party Advisory, Vendor Advisory
• https://support.gog.com/hc/en-us/articles/360025458833-GOG-GALAXY-2-0-updates-and-known-issuesRelease Notes, Vendor Advisory

Published

Nov 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15505drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kern…9.8
• CVE-2019-15506An issue was discovered in Kaseya Virtual System Administrat…
• CVE-2019-15507In Octopus Deploy versions 2018.8.4 to 2019.7.6, when a web …
• CVE-2019-15508In Octopus Tentacle versions 3.0.8 to 5.0.0, when a web requ…
• CVE-2019-1551There is an overflow bug in the x64_64 Montgomery squaring p…5.3
• CVE-2019-15510ManageEngine_DesktopCentral.exe in Zoho ManageEngine Desktop…6.1
• CVE-2019-15513An issue was discovered in OpenWrt libuci (aka Library for t…
• CVE-2019-15514The Privacy > Phone Number feature in the Telegram app 5.10 …
• CVE-2019-15515Discourse 2.3.2 sends the CSRF token in the query string.
• CVE-2019-15516Cuberite before 2019-06-11 allows webadmin directory travers…
• CVE-2019-15517jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f dire…
• CVE-2019-15518Swoole before 4.2.13 allows directory traversal in swPort_ht…