SteamOS 3.7.20 Stable Update Released with ntsync Driver and Crucial Security Fixes for All Users

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SteamOS 3.7.20 Update Addresses Critical Security Vulnerabilities Valve released SteamOS version 3.7.20 on March 10, 2026, which includes critical security patches for vulnerabilities identified as CVE-2025-66005 and CVE-2025-14338. These vulnerabilities could potentially allow attackers to exploit the system, affecting all users of SteamOS. The update also introduces support for the ntsync driver, enhancing system functionality. Users are advised to update their systems immediately to mitigate the risks associated with these vulnerabilities. The specific attack vectors and methods of exploitation have not been detailed in the articles, but the presence of critical CVEs indicates a significant risk. The scope of impact includes all devices running SteamOS, emphasizing the need for prompt action by users. As of the latest reports, the update is available for download and installation. 2 sources 73