CVE-2019-15316

概要

参考情報

• amonitoring.ru/article/onemore_steam_eop_0day · Third Party Advisory
• habr.com/ru/company/pm/blog/464367 · Third Party Advisory
• youtube.com/watch · Exploit
• youtube.com/watch · Exploit

steam client のその他の脆弱性

• CVE-2021-30481緊急 9.0Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because o…
• CVE-2020-15530高 7.8An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because so…
• CVE-2019-17180高 7.8Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modificati…
• CVE-2019-15315高 7.8Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the c…
• CVE-2019-14743中 6.6In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group,…