CVE-2020-15530 - CVE House
Back to Database
Status published High CVE-2020-15530

An issue was discovered in Valve Steam Client 2.10.91.91. The...

Vulnerability Description

An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts of %PROGRAMFILES(X86)%\Steam and/or %COMMONPROGRAMFILES(X86)%\Steam have weak permissions during a critical time window. An attacker can make this time window arbitrarily long by using opportunistic locks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-15530

Credits & Attribution

No credits recorded in the NVD database.

References

More from valvesoftware

View All →
CVE-2021-30481
Valve Steam before 2021-04-17, when a Source engine game is...
High 8
CVE-2020-9005
meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers...
High 7.8
CVE-2020-7952
rendersystemdx9.dll in Valve Dota 2 before 7.23f allows remote attackers...
High 7.8
CVE-2020-7951
meshsystem.dll in Valve Dota 2 before 7.23e allows remote attackers...
High 7.8
CVE-2020-7950
meshsystem.dll in Valve Dota 2 before 7.23f allows remote attackers...
High 7.8

Affected Vendor

valvesoftware

View all reports →

Affected Software

steam client
Vulnerable Versions:
2.10.91.91

Timeline

Official Publish: July 5th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.