CVE-2015-7985: Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows l...

Security readout for executives and security teams

CVE-2015-7985 describes weak file permissions in Valve Steam 2.10.91.91. A local user could abuse write access to the Steam install folder to run a malicious steam.exe with higher privileges. This is not a remote internet-facing issue, but it matters on shared workstations or managed endpoints. Exposure appears limited to hosts running Valve Steam 2.10.91.91 where ordinary local users can write to the Steam install directory. Inventory evidence is needed because the CVE record does not list formal CPEs or affected platform details. Treat this as a managed-endpoint hygiene issue. It is unlikely to drive emergency internet-facing response, but it can weaken workstation security where users share machines or where Steam exists on privileged endpoints. Mitigation focus: Check Valve guidance and update Steam where supported.; Remove Steam from systems where it is not business-required.; Restrict standard-user write access to the Steam install folder..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.