Researchers have uncovered 6 security flaws in Steam, including 2 remote code execution vulnerabilities that could let attackers run malicious code on other people’s PCs.
>One flaw was especially serious, it could potentially let an attacker run code on another connected Steam client without the user clicking anything.
>The researchers also found 4 local privilege escalation flaws that could allow an attacker with local access to gain higher privileges on a Windows system.
The bugs affected Steam’s messaging system and other components. Atredis Partners reported them to Valve, and says the issues have been patched