A privilege escalation exploit in the Steam Client
credits go to Vasily Kravets, more info here: https://amonitoring.ru/article/steamclient-0day/
Steam fixed the issue in the current beta, make sure to patch: https://steamcommunity.com/groups/SteamClientBeta#announcements/detail/1602638506845644644