CoreCVE
Back

HIGH

An issue was discovered in Valve Steam Client 2.10.91.91

Published Jul 5, 2020

Description

An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAMFILES(X86)%\Steam have weak permissions during a critical time window. An attacker can make this time window arbitrarily long by using opportunistic locks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Jul 5, 2020
Updated Aug 4, 2024
Reserved Jul 5, 2020
Link CVE-2020-15530

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-15530

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Jul 5, 2020
Updated Aug 4, 2024
Link EUVD-2020-7517

GitHub

No data