Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-7834

Local privilege escalation in Overwolf

Description

A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code with SYSTEM privileges by placing a malicious .dll file in the respective location.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Overwolf Overwolf

Default version status: unaffected

  • 0 to < 250.1.1affected

References