What’s Vulnerable › Vulnerabilities

CVE-2018-12270

• Severity: medium (CVSS 5.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-20 · updated 2026-06-17
• Weakness: CWE-20

Description

In Valve Steam 1528829181 BETA, it is possible to perform a homograph / homoglyph attack to create fake URLs in the client, which may trick users into visiting unintended web sites.

Affected products

• Valvesoftware Steam Client: 1528829181-beta

References

• https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270
• https://github.com/VixusFoxy/CVE/wiki/CVE-2018-12270

Get alerted when CVE-2018-12270 or the next vulnerability affects your stack