CVE-2019-14743
MEDIUM 6.6EPSS 0.6%
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
- CVSS v3.0 NVD
- 6.6 MEDIUM
CVSS:3.0/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 0.62% chance of exploitation in the next 30 days, 48th percentile
- Published
- 2019-08-07
- Updated
- 2024-08-05