CVE-2023-35855: Valvesoftware Counter-Strike

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.

Affected products

• Valvesoftware Counter-Strike: up to and including 8684

Published 2023-06-19. Last modified 2026-06-17.