Security Vulnerabilities fixed in Steam 2.10.91.91

description-logoDescription

Valve Steam Client for Windows through 2019-08-20 has weak folder permissions, leading to privilege escalation (to NT AUTHORITY SYSTEM) via crafted use of CreateMountPoint.exe and SetOpLock.exe to leverage a TOCTOU race condition.

affected-products-logoAffected Applications

Steam