On the 30th of May security researcher Tom Court published an article detailing a RCE vulnerability in the steam client which had existed for about 10 years. The vulnerability was reported to steam in february and has since been patched.
Thought you guys might be interested in the article which goes about to explain the specifics of the vulnerability.