CVE-2019-14743: High severity steam client vulnerability
Published Aug 7, 2019
·Updated
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
Affected Software
2 affected components
Valvesoftware Steam Client<=2019-08-07
Microsoft Windows
Remediation
Patch Available
Patch Available
Event History
Aug 7, 2019
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Frequently Asked Questions
1
What is CVE-2019-14743?
CVE-2019-14743 is a vulnerability found in the Valve Steam Client for Windows, which allows local users to gain NT AUTHORITY\SYSTEM access.
2
How severe is CVE-2019-14743?
CVE-2019-14743 has a severity rating of 6.6, which is considered high.
3
How does CVE-2019-14743 affect Valve Steam Client?
CVE-2019-14743 affects Valve Steam Client for Windows versions up to and including 2019-08-07.
4
How can local users exploit CVE-2019-14743?
Local users can exploit CVE-2019-14743 to gain NT AUTHORITY\SYSTEM access.
5
Are there any available fixes for CVE-2019-14743?
There are no available fixes for CVE-2019-14743 at the moment. It is recommended to update Valve Steam Client to the latest version when a fix becomes available.