CVE-2016-5237 EXPLOIT
4.8
MEDIUM · CVSS 3.0 · EPSS 0.8% (pctl 55)
Patch early
A public exploit exists.
Description
Valve Steam 3.42.16.13 uses weak permissions for the files in the Steam program directory, which allows local users to modify the files and possibly gain privileges as demonstrated by a Trojan horse Steam.exe file.
Scoring
| CVSS | 4.8 (MEDIUM, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L |
| EPSS | 0.78% — more likely to be exploited than 55% of all CVEs |
| Weakness | CWE-264 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-01-23 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| valvesoftware | steamos |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Valve Steam 3.42.16.13 - Local Privilege Escalation | 2016-06-06 |
References
→ the Explorer · watch your stack · NVD