CVE-2015-7985

CVE-2015-7985 describes a local privilege escalation vulnerability in Valve Steam client version 2.10.91.91. Weak permissions on the Steam Install folder allow a local attacker to replace the legitimate steam.exe with a malicious Trojan horse, gaining elevated privileges. This vulnerability has a CVSS score of 7.2, indicating high severity with complete confidentiality, integrity, and availability impacts, and is easily exploitable with low attack complexity. While not listed on CISA's KEV, public exploit code exists (EDB-9386), and it garnered some community discussion and media coverage at the time of discovery.