cvedb.io
CVE-2015-7985
UNKNOWN · CVSS n/a
EPSS exploitation probability: 0%
Published 2015-11-24T20:59:16.300 · Last modified 2026-06-17T00:33:30.817

Summary

Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users to gain privileges via a Trojan horse steam.exe file.

Affected products

valvesoftware — steam_client

Does this affect you?

Add your gear to cvedb and we'll alert you only when valvesoftware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.