Description
In Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick users into visiting unintended web sites.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_misc
https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270
Scores
CVSS v3
5.4
EPSS
0.0089
EPSS Percentile
55.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Details
CWE
CWE-20
Status
published
Products (1)
valvesoftware/steam_client
1528829181 beta
Published
May 20, 2019
Tracked Since
Feb 18, 2026