Vulnerabilities > Valvesoftware > High

DATE CVE VULNERABILITY TITLE RISK
2015-11-24 CVE-2015-7985 Incorrect Default Permissions vulnerability in Valvesoftware Steam Client 2.10.91.91
Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.
local
low complexity
valvesoftware CWE-276
7.2