Description
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
Unscored
CVE-2019-14743
EUVD-2019-5883GHSA-377c-pvc8-rpq3
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group…
Published Aug 7, 2019 · Updated Aug 5, 2024 · Assigned by mitre