RCE on Steam Client via buffer overflow in Server Info Analysed #470520 Valid Memory Corruption Critical 2019-03-15 – 1,289 Panorama UI XSS leads to Remote Code Execution via Kick/Disconnect Message Analysed #631956 Valid Command and Code Injection Critical 2019-10-08 – 420 Malformed .BMP file in Counter-Strike 1.6 may cause shellcode injection Analysed #397545 Valid Memory Corruption High 2020-02-27 – 321 Unchecked weapon id in WeaponList message parser on client leads to RCE Analysed #513154 Valid Memory Corruption Critical 2019-09-17 $3,000 229 OOB reads in network message handlers leads to RCE Analysed #807772 Valid Memory Corruption Critical 2021-05-04 $7,500 219 RCE on CS:GO client using unsanitized entity ID in EntityMsg message Analysed #584603 Valid Memory Corruption Critical 2021-05-27 $9,000 209 Malformed .BSP Access Violation in CS:GO can lead to Remote Code Execution Analysed #351014 Valid Memory Corruption Critical 2018-07-19 – 154 MySQL username and password leaked in developer.valvesoftware.com via source code dislosure Analysed #291057 Valid Authentication Medium 2018-05-07 – 123 CS:GO Server -> Client RCE through OOB access in CSVCMsg_SplitScreen + Info leak in HTTP download Analysed #1070835 Valid Memory Corruption Critical 2021-05-17 $7,500 66 https://srcds.valve.net/find/ is leaking server config / API keys Analysed #1168557 Valid Information Disclosure High 2024-08-06 – 56 Buffer overflow In hl.exe's launch -game argument allows an attacker to execute arbitrary code locally or from browser Analysed #832750 Valid Memory Corruption High 2020-08-19 – 55 Link filter protection bypass Analysed #291750 Valid Open Redirect Medium 2018-05-09 – 55 [CS:GO] Unchecked texture file name with TEXTUREFLAGS_DEPTHRENDERTARGET can lead to Remote Code Execution Analysed #550625 Valid Memory Corruption High 2021-05-06 $2,500 48 Signedness issue in ClassInfo message handler leads to RCE on CS:GO client Analysed #876719 Valid Memory Corruption Critical 2021-05-27 $7,500 35 Xss was found by exploiting the URL markdown on http://store.steampowered.com Analysed #313250 Valid Cross-site Scripting Medium 2018-05-09 $1,000 32 Reflected XSS in www.dota2.com Analysed #292457 Valid Cross-site Scripting Medium 2018-05-09 – 32 Malformed Skybox .TGA in Half-Life (GoldSRC) leads to Access Violation Analysed #351016 Valid Memory Corruption High 2018-08-28 – 30 unlock self-lock by brute force Analysed #410221 Valid Authentication Medium 2019-01-23 $900 27 GoldSrc: Buffer Overflow in DELTA_ParseDelta function leads to RCE Analysed #484745 Valid Memory Corruption Critical 2021-05-04 $3,000 26 Deleting other people's comments on ModeratorMessages Analysed #357952 Valid Authentication Low 2019-01-23 $500 25 [GoldSrc] RCE via 'spk' Console Command Analysed #769014 Valid Memory Corruption High 2020-08-19 $350 23 GetGlobalAchievementPercentagesForApp is missing the same release checks as GetSchemaForGame Analysed #541020 Valid Information Disclosure Medium 2020-02-19 – 22 Reflected XSS on help.steampowered.com Analysed #390429 Valid Cross-site Scripting Medium 2019-01-07 – 16