PT-2025-22384 · Valve · Steam Client

CVE-2025-27998

·

Publicado

2025-05-21

·

Atualizado

2025-12-27

CVSS v3.1

8.4

Alta

VetorAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Valvesoftware Steam Client version 1738026274
Description The issue allows attackers to escalate privileges via a crafted executable or DLL. This can be achieved by manipulating a specifically crafted executable or DLL, which enables the attackers to gain elevated access.
Recommendations For version 1738026274, consider restricting the execution of external executables or DLLs to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using potentially vulnerable executables or DLLs with the Steam Client.

Correção

LPE

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-27998

Produtos afetados

Steam Client