Skip to main content

A new Zero-Day in Steam client impacts over 96 million Windows users

  • August 22, 2019
  • 0 replies
  • 2 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
August 22, 2019 By Pierluigi Paganini

A new zero-day vulnerability in the for Windows impacting over 96 million users was disclosed by researcher Vasily Kravets.


A news zero-day flaw in the Steam client for Windows client impacts over 96 million users. The flaw is a privilege escalation vulnerability and it has been publicly disclosed by researcher Vasily Kravets.

Kravets is one of the researchers that discovered a first zero-day flaw in the Steam client for Windows, the issue was initially addressed by Valve, but the researcher Xiaoyin Liu disclosed a bypass to the fix implemented by Valve to re-enable to issue.

Valve did not award Kravets and banned him from it bug bounty program.

Full Article.