CVE-2019-15315: High severity steam client vulnerability
Valve Steam Client for Windows through 2019-08-16 allows privilege escalation (to NT AUTHORITY\SYSTEM) because local users can replace the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15315?
CVE-2019-15315 is a vulnerability in Valve Steam Client for Windows that allows privilege escalation to NT AUTHORITY\SYSTEM.
How can local users exploit CVE-2019-15315?
Local users can exploit CVE-2019-15315 by replacing the current versions of SteamService.exe and SteamService.dll with older versions that lack the CVE-2019-14743 patch.
What is the severity of CVE-2019-15315?
CVE-2019-15315 has a severity rating of 7.8 (high).
Which software is affected by CVE-2019-15315?
The Valve Steam Client for Windows versions up to and including 2019-08-16 are affected by CVE-2019-15315.
Where can I find more information about CVE-2019-15315?
You can find more information about CVE-2019-15315 at the following link: https://xiaoyinl.github.io/steam_EoP_bypass.html