Unfiltered input allows for XSS in "Playtime Item Grants" fields #353334 Valid Cross-site Scripting Medium 2018-05-24 – 13 XSS @ store.steampowered.com via agecheck path name #406704 Valid Cross-site Scripting Medium 2019-01-07 $750 14 Malformed .WAV triggers an Access Violation on GoldSRC (hl.exe) #495789 Valid Memory Corruption Medium 2020-02-27 – 14 ajaxgetachievementsforgame is not guarded for unreleased apps #835087 Valid Information Disclosure Medium 2020-07-30 $750 14 Aapp name leakage on economy history page #349681 Valid Information Disclosure Medium 2018-05-24 – 16 Reflected XSS on help.steampowered.com #390429 Valid Cross-site Scripting Medium 2019-01-07 – 16 resetreportedcount & updatetags doesn't verify appid param Analysed #351106 Valid Authentication Medium 2018-07-02 $750 19 GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGame Analysed #541020 Valid Information Disclosure Medium 2020-02-19 – 22 [CS 1.6] Map cycle abuse allows arbitrary file read/write Analysed #590279 Valid Access Control Medium 2021-02-22 $750 22 Privilege Escalation vulnerability in steam's Remote Play feature leads to arbitrary kernel-mode driver installation Analysed #852091 Valid Access Control Medium 2021-09-21 – 23 GetReports works for hubs you don't have access to Analysed #350937 Valid Information Disclosure Medium 2018-05-30 $750 24 unlock self-lock by brute force Analysed #410221 Valid Authentication Medium 2019-01-23 $900 27 code injection, steam chat client Analysed #411329 Valid Command and Code Injection Medium 2019-01-07 $750 28 Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution Analysed #505173 Valid Memory Corruption Medium 2019-09-17 $350 30 Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState Analysed #780167 Valid Information Disclosure Medium 2020-03-20 – 31 Reflected XSS in www.dota2.com Analysed #292457 Valid Cross-site Scripting Medium 2018-05-09 – 32 Xss was found by exploiting the URL markdown on http://store.steampowered.com Analysed #313250 Valid Cross-site Scripting Medium 2018-05-09 $1,000 32 Buffer overflows in demo parsing Analysed #350119 Valid Memory Corruption Medium 2018-08-28 – 33 Read Access to all comments on unauthorized forums' discussions! IDOR! Analysed #308610 Valid Insecure Direct Object Reference Medium 2018-05-09 $500 34 Stored XSS in the guide's GameplayVersion (www.dota2.com) Analysed #380045 Valid Cross-site Scripting Medium 2019-01-07 $750 36 Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows Client #682774 Valid File and Path Handling Medium 2019-09-26 $1,250 41 Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile Name Analysed #351171 Valid Cross-site Scripting Medium 2018-05-24 $750 42 Link filter protection bypass Analysed #291750 Valid Open Redirect Medium 2018-05-09 – 55 Steam chat - trade offer presentation vulnerability Analysed #745447 Valid Input Validation and Logic Medium 2020-02-19 – 60 [steam client] Opening a specific steam:// url overwrites files at an arbitrary location Analysed #667242 Valid Memory Corruption Medium 2020-09-22 $750 80 ImageMagick GIF coder vulnerability leading to memory disclosure Analysed #315256 Valid Information Disclosure Medium 2018-07-02 – 86 MySQL username and password leaked in developer.valvesoftware.com via source code dislosure Analysed #291057 Valid Authentication Medium 2018-05-07 – 123