Steam Deck Single Click Root Remote Code Execution
High
V
Valve
Submitted None
Team Summary
Official summary from Valve
The version of Chromium Embedded Framework included in the Linux client was susceptible to a v8 exploit that allowed modification of local files. The researcher demonstrated chaining local file modification to a local privilege escalation.
Actions:
Reported by
g1a55er
Report Details
Additional information and metadata
State
Closed
Substate
Informative
Bounty
$750.00