Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqr5-g657-83ch

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

EPSS

Процентиль: 10%
0.00035
Низкий

Связанные уязвимости

CVSS3: 7.8
nvd
больше 6 лет назад

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

EPSS

Процентиль: 10%
0.00035
Низкий