High severity7.0NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026
CVE-2019-15316
CVE-2019-15316
Description
Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*range: <=2019-08-20
- (no CPE)range: <=2019-08-20
- Valve/Steam Clientdescription
Patches
Vulnerability mechanics
References
4- www.youtube.com/watchnvdExploitThird Party Advisory
- www.youtube.com/watchnvdExploitThird Party Advisory
- amonitoring.ru/article/onemore_steam_eop_0day/nvdThird Party Advisory
- habr.com/ru/company/pm/blog/464367/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.