CVE-2019-15315

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2019-08-21

Last modified

2024-08-05

Weaknesses

CWE-732

Affected products

• Steam Client (Valvesoftware)

References

• https://xiaoyinl.github.io/steam_EoP_bypass.html