CVE-2016-5237

CVE-2016-5237 describes a local privilege escalation vulnerability in Valve Steam 3.42.16.13 and Valve SteamOS, stemming from weak permissions in the Steam program directory. This allows a local, authenticated attacker to modify Steam files, potentially leading to privilege escalation through a Trojan horse executable. With a CVSS score of 4.8 (Medium), exploitation requires local access and user interaction, but could result in low impact to confidentiality, integrity, and availability. While not actively exploited in the wild or on the KEV catalog, public exploit code exists (EDB-39888), though there is minimal community discussion or media coverage surrounding this vulnerability.