Steam client flaw with no fix enables privilege elevation on Windows

A proof-of-concept exploit named BrokenPipe abuses the Steam Client Service to elevate a standard Windows user to NT AUTHORITY\SYSTEM without displaying a UAC prompt or requiring administrator credentials. The issue was disclosed on GitHub by security researcher KillaBoi (@killa), who says Valve had been notified about the vulnerability since...