Browse CVEs

HIGH 7.5 CVE-2023-38312 A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game server) to read arbitrary file… Counter Strike Mitigation only Fix from $1,9502023-10-15 HIGH 7.3 CVE-2023-30382 A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supp… Half Life Mitigation only Fix from $1,9502023-05-23 HIGH 7.8 CVE-2020-15530 An issue was discovered in Valve Steam Client 2.10.91.91. The installer allows local users to gain NT AUTHORITY\SYSTEM privileges because some parts … Steam Client No fix yet Fix from $1,9502020-07-05 HIGH 7.8 CVE-2020-12242 Valve Source allows local users to gain privileges by writing to the /tmp/hl2_relaunch file, which is later executed in the context of a different us… Source No fix yet Fix from $1,9502020-04-27 MEDIUM 5.4 CVE-2018-12270 In Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick users int… Steam Client Mitigation only Fix from $1,6002019-05-20 HIGH 7.2 CVE-2015-7985 Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan… Steam Client No fix yet Fix from $1,9502015-11-24 MEDIUM 5.0 CVE-2008-7203 Valve Software Half-Life Counter-Strike 1.6 allows remote attackers to cause a denial of service (crash) via multiple crafted login packets. Counter Strike No fix yet Fix from $1,6002009-09-11