Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Valve Steam Client for Windows through 2019-08-07, HKLM\SOFTWARE\Wow6432Node\Valve\Steam has explicit "Full control" for the Users group, which allows local users to gain NT AUTHORITY\SYSTEM access.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Valve Steam Client for Windows 输入验证错误漏洞
Vulnerability Description
Valve Steam是美国Valve公司的一套游戏发行管理平台。该平台提供数字版权管理、多人游戏、流媒体和社交网络服务等功能。 Valve Steam Client for Windows 2019-08-07及之前版本中存在输入验证错误漏洞。本地攻击者可利用该漏洞获取NT AUTHORITYSYSTEM权限。
CVSS Information
N/A
Vulnerability Type
N/A