Steam Client
Approved changes feed: RSS · Atom
cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Valvesoftware (1f899491-a623-563d-8b9f-d478abb59c2f) |
|---|---|
| Product | Steam Client (e700e5cd-346d-5281-9bea-10d0567f7914) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-30481 |
vulnerable | 2026-06-08 05:31:51.071053 |
Details available
HIGH (8)
Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.
Published: 2021-04-10T18:31:34.000Z
Updated: 2025-11-03T05:30:21.447Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17180 |
vulnerable | 2026-06-08 05:13:10.066800 |
Details available
Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM. This could lead to denial of service, elevation of privilege, or unspecified other impact.
Published: 2019-10-04T19:21:02.000Z
Updated: 2024-08-05T01:33:17.306Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15316 |
vulnerable | 2026-06-08 05:12:57.209909 |
Details available
Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.
Published: 2019-08-21T19:36:06.000Z
Updated: 2024-08-05T00:42:03.701Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15315 |
vulnerable | 2026-06-08 05:12:57.209462 |
Details available
Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.
Published: 2019-08-21T19:35:49.000Z
Updated: 2024-08-05T00:42:03.779Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-14743 |
vulnerable | 2026-06-08 05:12:55.962766 |
Details available
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
Published: 2019-08-07T14:05:50.000Z
Updated: 2024-08-05T00:26:38.628Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4016 |
vulnerable | 2026-06-08 05:06:39.002103 |
Details available
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.
Published: 2015-05-20T18:00:00.000Z
Updated: 2024-08-06T06:04:02.178Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.