CVE-2019-15316

Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY\SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.

CVSS v3.0

7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.39% chance of exploitation in the next 30 days, 32th percentile

Published

2019-08-21

Updated

2024-08-05

Proof-of-concept exploits (2)

• https://www.youtube.com/watch?v=I93aH86BUaE
• https://www.youtube.com/watch?v=ZCHrjP0cMew

References

• CVE Record
• NVD entry

Related

• CVE-2019-15314
• CVE-2019-15324
• CVE-2019-15276
• CVE-2019-15478
• CVE-2019-15258
• CVE-2019-15479