Vulnerabilities > Valvesoftware > Steam Client > 2019.09.10

DATE CVE VULNERABILITY TITLE RISK
2021-04-10 CVE-2021-30481 Classic Buffer Overflow vulnerability in Valvesoftware Steam Client
Valve Steam through 2021-04-10, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.
network
low complexity
valvesoftware CWE-120
critical
 9.0
9.0
2019-10-04 CVE-2019-17180 Path Traversal vulnerability in Valvesoftware Steam Client
Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM.
local
low complexity
valvesoftware CWE-22
7.8
7.8