Getting all the CD keys of any game Analysed #391217 Valid Access Control Critical 2018-10-31 $20,000 638 Modify in-flight data to payment provider Smart2Pay Analysed #1295844 Valid Input Validation and Logic Critical 2021-08-10 $7,500 443 Malformed NAV file leads to buffer overflow and code execution in Left4Dead2.exe Analysed #542180 Valid Memory Corruption Critical 2020-03-25 $10,000 268 [Portal 2] Remote Code Execution via voice packets Analysed #733267 Valid Memory Corruption Critical 2021-05-10 $5,000 173 [Half-Life 1] Malformed map name leads to memory corruption and code execution Analysed #402566 Valid Memory Corruption High 2020-09-22 $1,500 163 Specially Crafted Closed Captions File can lead to Remote Code Execution in CS:GO and other Source Games Analysed #463286 Valid Memory Corruption Critical 2021-05-05 $7,500 109 Malformed save files (.sav) allow to write files with arbitrary extensions and content in GoldSrc-based games. Analysed #458842 Valid Other weaknesses High 2020-02-24 $1,500 99 Malformed .MDL triggers an Access Violation on GoldSRC (hl.exe) Analysed #495793 Valid Memory Corruption High 2019-10-09 – 90 Access to microtransaction sales data for lots of apps from 2014 to present at /valvefinance/sanity/ Analysed #975212 Valid Access Control Critical 2021-09-21 – 88 [steam client] Opening a specific steam:// url overwrites files at an arbitrary location Analysed #667242 Valid Memory Corruption Medium 2020-09-22 $750 80 Malformed playlist.txt in GoldSrc games leads to Access Violation & arbitrary code execution Analysed #504951 Valid Memory Corruption High 2019-09-17 $1,000 62 Big Picture web browser leaks login cookies and discloses sensitive information (may lead to account takeover) Analysed #1079561 Valid Information Disclosure High 2021-09-21 – 60 Steam chat - trade offer presentation vulnerability Analysed #745447 Valid Input Validation and Logic Medium 2020-02-19 – 60 [Source Engine] Material path truncation leads to Remote Code Execution Analysed #544096 Valid Input Validation and Logic High 2021-05-06 $2,500 60 Add any depot to your app and access its contents without decryption key; via /apps/setcommonredists Analysed #1018368 Valid Access Control High 2024-07-30 – 56 Stored XXS @ https://steamcommunity.com/search/users/#text= via Profile Name Analysed #351171 Valid Cross-site Scripting Medium 2018-05-24 $750 42 Web API key registration allows registering multiple keys by reusing `request_id` Analysed #2270633 Valid No weakness recorded Low 2023-12-12 – 40 Stored XSS in the guide's GameplayVersion (www.dota2.com) Analysed #380045 Valid Cross-site Scripting Medium 2019-01-07 $750 36 Read Access to all comments on unauthorized forums' discussions! IDOR! Analysed #308610 Valid Insecure Direct Object Reference Medium 2018-05-09 $500 34 Malformed map detailed texture files in GoldSrc games lead to Remote Code Execution Analysed #505173 Valid Memory Corruption Medium 2019-09-17 $350 30 code injection, steam chat client Analysed #411329 Valid Command and Code Injection Medium 2019-01-07 $750 28 [GoldSrc] RCE via malformed BSP file Analysed #763403 Valid Memory Corruption High 2020-08-19 $450 24 Unauthorized updates to extended_info properties in /store/ajaxpackagesave Analysed #815547 Valid Access Control High 2020-09-09 – 23 Comment restriction in subsection "Workshop" of domain "steamcommunity.com" can be bypassed using IDOR Analysed #365504 Valid Insecure Direct Object Reference Low 2019-01-07 – 22 Suspended users can bypass UGC upload ban Analysed #354660 Valid Access Control Low 2018-07-02 $500 22 Malformed BSP in GoldSrc Engine may cause shellcode injection Analysed #458929 Valid Memory Corruption High 2020-03-25 – 21 Potential buffer overflow in demoplayer module of GoldSource Engine Analysed #440758 Valid Memory Corruption Low 2020-02-27 – 17