CVE-2024-7834
High
Description
A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Overwolf
PublishedSep 4, 2024
First seenSep 4, 2024
Weakness typeCWE-427CWE-427
How to fix
Update
- overwolf overwolf250.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| overwolf overwolf | v < 250.1.1 | 250.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.