PT-2025-22384 · Valve · Steam Client
CVE-2025-27998
·
Publicado
2025-05-21
·
Atualizado
2025-12-27
CVSS v3.1
8.4
Alta
| Vetor | AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Valvesoftware Steam Client version 1738026274
Description
The issue allows attackers to escalate privileges via a crafted executable or DLL. This can be achieved by manipulating a specifically crafted executable or DLL, which enables the attackers to gain elevated access.
Recommendations
For version 1738026274, consider restricting the execution of external executables or DLLs to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using potentially vulnerable executables or DLLs with the Steam Client.
Correção
LPE
Code Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Steam Client