cvedb.io
CVE-2016-5237
MEDIUM · CVSS 4.8
EPSS exploitation probability: 0%
Published 2017-01-23T21:59:01.690 · Last modified 2026-06-17T00:49:01.630

Summary

Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.

Affected products

valvesoftware — steamos

Does this affect you?

Add your gear to cvedb and we'll alert you only when valvesoftware ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.