Valvesoftware vulnerabilities
We track 3 vulnerabilities in Valvesoftware products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 15, 2023.
3vulnerabilities
1critical
2high
0exploited
8.2average CVSS score
Latest Valvesoftware vulnerabilities
- 7.5 High severity
Counter-strike: Improper Limitation of a Pathname to a Restricted Directory
A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game server) to read arbitrary files from the underlying server via the motdfile console variable.
- 9.8 Critical severity
Counter-strike: Buffer Copy without Checking Size of Input
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
- 7.3 High severity
Half-life: Out-of-bounds Write
A buffer overflow in the component hl.exe of Valve Half-Life up to 5433873 allows attackers to execute arbitrary code and escalate privileges by supplying crafted parameters.