CVE-2020-24574

The client (aka GalaxyClientService.exe) in GOG GALAXY through 2.0.41 (as of 12:58 AM Eastern, 9/26/21) allows local privilege escalation from any authenticated user to SYSTEM by instructing the Windows service to execute arbitrary commands. This occurs because the attacker can inject a DLL into GalaxyClient.exe, defeating the TCP-based "trusted client" protection mechanism.

• CWE-798

• https://github.com/jtesta/gog_galaxy_client_service_pocExploit, Third Party Advisory
• https://github.com/jtesta/gog_galaxy_client_service_poc/issues/1#issuecomment-926932218Issue Tracking, Third Party Advisory
• https://www.gog.com/galaxyVendor Advisory
• https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/Exploit, Third Party Advisory
• https://github.com/jtesta/gog_galaxy_client_service_pocExploit, Third Party Advisory
• https://github.com/jtesta/gog_galaxy_client_service_poc/issues/1#issuecomment-926932218Issue Tracking, Third Party Advisory
• https://www.gog.com/galaxyVendor Advisory
• https://www.positronsecurity.com/blog/2020-08-13-gog-galaxy_client-local-privilege-escalation_deuce/Exploit, Third Party Advisory

Published

Aug 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-24568An issue was discovered in MB CONNECT LINE mymbCONNECT24 and…6.5
• CVE-2020-24569An issue was discovered in MB CONNECT LINE mymbCONNECT24 and…4.3
• CVE-2020-24570An issue was discovered in MB CONNECT LINE mymbCONNECT24 and…6.5
• CVE-2020-24571NexusQA NexusDB before 4.50.23 allows the reading of files v…7.5
• CVE-2020-24572An issue was discovered in includes/webconsole.php in RaspAP…8.8
• CVE-2020-24573BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow…7.5
• CVE-2020-24576Netskope Client through 77 allows low-privileged users to el…8.8
• CVE-2020-24577An issue was discovered on D-Link DSL-2888A devices with fir…7.5
• CVE-2020-24578An issue was discovered on D-Link DSL-2888A devices with fir…6.5
• CVE-2020-24579An issue was discovered on D-Link DSL-2888A devices with fir…8.8
• CVE-2020-24580An issue was discovered on D-Link DSL-2888A devices with fir…7.5
• CVE-2020-24581An issue was discovered on D-Link DSL-2888A devices with fir…8