VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026

CVE-2019-15315

CVE-2019-15315

Description

Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.

Affected products

3
  • Valve Software/Steam Client2 versions
    cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*range: <=2019-08-16
    • (no CPE)range: <=2019-08-16
  • Valve/Steam Clientdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.