Unscored CVE-2019-15315 EUVD-2019-6316GHSA-mqr5-g657-83ch

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the …

Published Aug 21, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Description

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

References

https://xiaoyinl.github.io/steam_EoP_bypass.html