CVE-2019-14743

PoC ×2—

CVSS 3.0

6.6 medium

EPSS

<1%p48

Published

Aug 7, 2019 (Aug 7, 2019)

Modified

Jun 17, 2026

Description

In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.

Vendors: valvesoftware
Products: steam client
Weakness: CWE-732
Vector: CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news1 stories

Expert shows how to bypass a fix for a recently discovered Steam flaw

Security AffairsAug 17, 08:02 UTC · Aug 17, 2019Exploit / PoC CVE-2019-14743