Steam Client Security Vulnerabilities and Issues — Steam Client CVE List

Lucene search

ValvesoftwareSteam Client

3 matches found

CVE•added 2019/08/07 3:15 p.m.•92 views

CVE-2019-14743

In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.

7.2CVSS6.8AI score0.0002EPSS

CVE•added 2019/08/21 8:15 p.m.•41 views

CVE-2019-15315

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

7.8CVSS6.7AI score0.00035EPSS

CVE•added 2019/08/21 8:15 p.m.•30 views

CVE-2019-15316

Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.

7CVSS7.1AI score0.00051EPSS