v
valve
Security Risk Profile
79
/100
highSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 11, 2023 to present
6
Total CVEs
2
Critical+High
1
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
8.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
79/100
high
⚠️ 1 Active Exploits
Severity Distribution
Critical
1High
1Medium
0Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
1
2
Code Injection
1
Most Affected Products
1. Valve Steam2
2. Sierra Six Studios Sniper: Phantom's Resolution2
3. Valve Source SDK1
4. Unity Technologies Unity1
5. Valve Steam Client1
Recent Vulnerabilities
See more →CVE-2017-20205
CVSS 9.2critical
Valve Source SDK Stack-Based Buffer Overflow RCE
Oct 15, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/steam-and-microsoft-warn-of-unity-flaw-exposing-gamers-to-attacks/
unknown
Steam and Microsoft warn of Unity flaw exposing gamers to attacks
Oct 6, 2025🔧 No Patch
CVE-2025-27998
CVSS 8.4high
May 21, 2025🔧 No Patch
https://www.bleepingcomputer.com/news/security/steam-pulls-game-demo-infecting-windows-with-info-stealing-malware/
unknown
Steam pulls game demo infecting Windows with info-stealing malware
Mar 21, 2025⚠ Exploited🔧 No Patch
https://www.theregister.com/2024/03/18/cyberattack_gifts_esports_pros_with/
unknown
Apex Legends pro tourney canned following cheaty cyberattack
Mar 18, 2024🔧 No Patch
https://www.bleepingcomputer.com/news/security/counter-strike-2-html-injection-bug-exposes-players-ip-addresses/
unknown
Counter-Strike 2 HTML injection bug exposes players’ IP addresses
Dec 11, 2023🔧 No Patch
Monitor valve in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.