CVSS 3.0
6.6 mediumCVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-14743
Medium (6.6) in valvesoftware steam client. EPSS 0.6% chance of exploitation in the next 30 days.
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- valvesoftware:steam_client